CVE-2022-27510

Published Nov 8, 2022

Last updated 10 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2022-27510 is an authentication bypass vulnerability affecting Citrix ADC (Application Delivery Controller) and Citrix Gateway. Disclosed on November 8, 2022, it allows unauthorized access to Gateway user capabilities. To be vulnerable, the server must be configured as a Gateway (SSL VPN, ICA Proxy, CVPN, RDP Proxy). The vulnerability is classified as an authentication bypass using an alternate path or channel and improper authentication. It affects multiple versions of Citrix ADC and Citrix Gateway, specifically versions 13.1 before 13.1-33.47, 13.0 before 13.0-88.12, and 12.1 before 12.1-65.21, as well as Citrix ADC 12.1-FIPS before 12.1-55.289 and Citrix ADC 12.1-NDcPP before 12.1-55.289. An unauthenticated remote attacker can exploit this vulnerability by sending malicious packets to the target device, resulting in authentication bypass access to background services.

Description
Unauthorized access to Gateway user capabilities
Source
secure@citrix.com
NVD status
Modified

Risk scores

CVSS 3.1

Type
Primary
Base score
9.8
Impact score
5.9
Exploitability score
3.9
Vector string
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

secure@citrix.com
CWE-288
nvd@nist.gov
CWE-287

Social media

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score

12

Configurations