Vulnerabilities fixed in Citrix Gateway and Citrix ADC

🗓️ 08 Nov 2022 00:00:00Reported by NCSCType

ncsc

ncsc🔗 advisories.ncsc.nl👁 6 Views

Citrix fixed critical Gateway and ADC flaws allowing remote authentication bypass via VPN gateway; patches released.

Reporter	Title	Published	Views	Family All 40
BDU FSTEC	The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller), as well as Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway), relates to bypassing authentication procedures by using an alternative path or channel. This allows attackers to increase their privileges.	14 Nov 202200:00	–	bdu_fstec
BDU FSTEC	The vulnerability of Citrix ADC application delivery controllers (formerly known as Citrix NetScaler Application Delivery Controller), as well as Citrix Gateway access control systems (formerly known as Citrix NetScaler Gateway), stems from insufficient verification of data authenticity. This allows attackers to gain access to servers configured in RDP proxy mode.	3 Jan 202300:00	–	bdu_fstec
GithubExploit	Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller	20 Jul 202316:05	–	githubexploit
Circl	CVE-2022-27510	8 Nov 202219:50	–	circl
Circl	CVE-2022-27513	8 Nov 202219:50	–	circl
Circl	CVE-2022-27516	8 Nov 202219:50	–	circl
Tenable Nessus	Citrix ADC and Citrix Gateway 12.1.x < 12.1-65.21 / 13.0.x < 13.0-88.12 / 13.1.x < 13.1-33.47 Multiple Vulnerabilities (CTX463706)	9 Nov 202200:00	–	nessus
CNNVD	Citrix Gateway和Citrix ADC 安全漏洞	8 Nov 202200:00	–	cnnvd
CNNVD	Citrix Gateway和Citrix ADC 数据伪造问题漏洞	8 Nov 202200:00	–	cnnvd
CNNVD	Citrix Gateway和Citrix ADC 授权问题漏洞	8 Nov 202200:00	–	cnnvd

08 Nov 2022 00:00Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.8

EPSS0.01231

SSVC

gateway vulnerability adc vulnerability remote authentication bypass vpn gateway security bulletin citrix