Thousands of Citrix servers still vulnerable to CVE-2022-27510 and CVE-2022
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-27510 | Unauthorized access to Gateway user capabilities | 9.8 | 1% | ||
| CVE-2022-27518 | Unauthenticated RCE/Authentication Bypass in Citrix ADC and Gateway | 9.8 | 7% | KEV | KEV |
From the original article
3 min read at securityaffairs.com
Researchers warn of thousands of Citrix Application Delivery Controller (ADC) and Gateway endpoints are still unpatched. NCC Group’s Fox-IT research team warns of thousands of Citrix ADC and Gateway endpoints remain vulnerable to two critical vulnerabilities, tracked as CVE-2022-27510 and CVE-2022-27518 (CVSS scores: 9. 8), that the company addressed in recent months.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.