vulnerability
Citrix Gateway/Application Delivery Controller: CVE-2022-27518: Unauthenticated remote arbitrary code execution
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 8 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | Dec 13, 2022 | Dec 13, 2022 | Dec 14, 2022 |
Severity
8
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Dec 13, 2022
Added
Dec 13, 2022
Modified
Dec 14, 2022
Description
A vulnerability has been discovered in Citrix Gateway and Citrix ADC (formerly known as NetScaler ADC), that, if exploited, could allow an unauthenticated remote attacker to perform arbitrary code execution on the appliance.
Solutions
citrix-adc-upgrade-12_1_65_25citrix-adc-upgrade-13_0_58_32
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.