CVE-2022-27511 Privilege escalation in Citrix Application Delivery Management (Citrix ADM)
Remote unauthenticated attackers can corrupt the system to reset the admin password, gaining administrative access via SSH after reboot.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-27511?
CVE-2022-27511 is a high-severity vulnerability in Citrix Application Delivery Management (Citrix ADM), published on 16 Jun 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted.
Weakness: CWE-284
Which versions are affected by CVE-2022-27511?
It affects 1 product.
Products include Citrix Application Delivery Management.
How do I fix CVE-2022-27511?
No fix has been published for CVE-2022-27511 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-27511 being exploited?
There is no known exploitation of CVE-2022-27511 in the wild and no public exploit code.
Other vulnerabilities in Citrix Application Delivery Management (Citrix ADM)
Sources
Also known as GHSA-m9r7-42xp-mhjp.