critical9.8Known exploited
CVE-2022-27518
Citrix Application Delivery Controller (ADC) and Gateway Authentication Bypass Vulnerability
Exploited in the wild
This vulnerability is on a Known Exploited Vulnerabilities catalogue, added 2022-12-13. Federal due date: 2023-01-03.
Apply updates per vendor instructions.
Impact
Unauthenticated remote arbitrary code execution
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Citrix | Application Delivery Controller Firmware | from 12.1 before 12.1-55.291 from 12.1 before 12.1-65.25 from 13.0 before 13.0-58.32 |
| Citrix | Gateway Firmware | from 12.1 before 12.1-65.25 from 13.0 before 13.0-58.32 |