Actively exploited · Published Dec 13, 2022 · Assigned by Citrix
CVE-2022-27518Unauthenticated remote arbitrary code execution
Critical 9.8 Exploited
In plain English
A critical-severity security flaw in Citrix Gateway, Citrix ADC from Citrix. Attackers are actively exploiting it in the wild (listed by CISA on December 13, 2022). The chance it is exploited in the next 30 days is estimated at 6.9% (higher than 94% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code. Apply updates per vendor instructions.
Severity (CVSS 3.1)9.8Critical
Exploit odds (30 days)6.9%top 5.9% of all CVEs
Exploited in the wildYesCISA KEV since Dec 13, 2022
Attack tooling1Public PoC
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Jan 3, 2023.
Official description
Unauthenticated remote arbitrary code execution
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Citrix | Citrix Gateway, Citrix ADC | 12.113.012.1 FIPs, NDcPP |
Weakness: CWE-664 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H