Critical severity9.8CISA KEVNVD Advisory· Published Dec 13, 2022· Updated Jun 17, 2026
CVE-2022-27518
CVE-2022-27518
Description
Unauthenticated remote arbitrary code execution
Affected products
7cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:*:*:*:*range: >=12.1,<12.1-65.25
- cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:fips:*:*:*range: >=12.1,<12.1-55.291
- cpe:2.3:o:citrix:application_delivery_controller_firmware:*:*:*:*:ndcpp:*:*:*range: >=12.1,<12.1-55.291
- cpe:2.3:o:citrix:gateway_firmware:*:*:*:*:*:*:*:*Range: >=12.1,<12.1-65.25
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 12.1
Patches
Vulnerability mechanics
References
2- support.citrix.com/article/CTX474995nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.