CVE-2022-27518 Unauthenticated remote arbitrary code execution

🗓️ 13 Dec 2022 00:00:00Reported by CitrixType

Unauthenticated remote arbitrary code execution vulnerability with CVE-2022-2751

Reporter	Title	Published	Views	Family All 28
ATTACKERKB	CVE-2022-27518	13 Dec 202217:15	–	attackerkb
BDU FSTEC	The vulnerability of the Citrix ADC application delivery controller (formerly Citrix NetScaler Application Delivery Controller) and the Citrix Gateway access control system (formerly Citrix NetScaler Gateway) allows a perpetrator to execute arbitrary code.	19 Dec 202200:00	–	bdu_fstec
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	20 Jul 202316:05	–	githubexploit
Circl	CVE-2022-27518	13 Dec 202213:44	–	circl
CISA KEV Catalog	Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability	13 Dec 202200:00	–	cisa_kev
CISA	Citrix Releases Security Updates for Citrix ADC, Citrix Gateway	13 Dec 202200:00	–	cisa
Tenable Nessus	Citrix ADC and Citrix Gateway RCE (CTX474995)	13 Dec 202200:00	–	nessus
CNNVD	Citrix Systems Citrix Gateway 和 Citrix ADC 安全漏洞	13 Dec 202200:00	–	cnnvd
Citrix	Citrix ADC and Citrix Gateway Security Bulletin for CVE-2022-27518	13 Dec 202212:01	–	citrix
Citrix	Netscaler CVE & Security Guide	14 Jul 202400:00	–	citrix

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix Gateway, Citrix ADC",
    "vendor": "Citrix",
    "versions": [
      {
        "status": "affected",
        "version": "12.1"
      },
      {
        "status": "affected",
        "version": "13.0"
      },
      {
        "status": "affected",
        "version": "12.1 FIPs, NDcPP"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/article/CTX474995

18 Oct 2023 17:34Current

9.9High risk

Vulners AI Score9.9

CVSS 3.19.8

EPSS0.06931

CWE-664