CVE-2022-27511

Corruption of the system by a remote, unauthenticated user potentially leading to the reset of the administrator password

Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted.

Affected

Citrix · Citrix Application Delivery Management (Citrix ADM)

CVSS v3.1 NVD

8.1 HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

7.8 HIGHAV:N/AC:L/Au:N/C:N/I:C/A:N

EPSS

12.69% chance of exploitation in the next 30 days, 96th percentile

Published

2022-06-16

Updated

2024-09-17

Proof-of-concept exploits (1)

• rbowes-r7/doltool9★ · 2022-10-18

Security advisories

• https://support.citrix.com/article/CTX460016/citrix-application-delivery-management-secur…

References

• CVE Record
• NVD entry

Related

• CVE-2022-27512
• CVE-2022-28219
• CVE-2022-30333
• CVE-2022-3602
• CVE-2022-3786
• CVE-2022-41622