Thousands of Citrix Servers Still Unpatched for Critical Vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-27510 | Unauthorized access to Gateway user capabilities | 9.8 | 1% | ||
| CVE-2022-27518 | Unauthenticated RCE/Authentication Bypass in Citrix ADC and Gateway | 9.8 | 7% | KEV | KEV |
From the original article
1 min read at thehackernews.com
Thousands of Citrix Application Delivery Controller (ADC) and Gateway endpoints remain vulnerable to two critical security flaws disclosed by the company over the last few months. The issues in question are CVE-2022-27510 and CVE-2022-27518 (CVSS scores: 9. 8), which were addressed by the virtualization services provider on November 8 and December 13, 2022, respectively.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.