Vulnerability · Published Jun 16, 2022 · Assigned by Citrix
CVE-2022-27511Corruption of the system by a remote, unauthenticated user potentially leading to the reset of the administrator password
High 8.1
In plain English
A high-severity improper access control in Citrix Application Delivery Management (Citrix ADM) from Citrix. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 12.7% (higher than 96% of all known vulnerabilities).
Severity (CVSS NVD)8.1High
Exploit odds (30 days)12.7%top 3.7% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Citrix | Citrix Application Delivery Management (Citrix ADM) | unspecified – before 13.1-21.53unspecified – before 13.0-85.19 |
Weakness: CWE-284