CVE-2022-27513 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	8.3 HIGH	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Citrix	CNA	8.3 HIGH	NETWORK	HIGH	NONE	CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
CVE	ADP	---				---
CISA-ADP	ADP	---				---

Base Score

CVSS 3.x

EPSS Score

Percentile: 60%

Vendor	Product	Version
citrix	gateway	12.1 ≤ 𝑥 < 12.1-65.21
citrix	gateway	13.0 ≤ 𝑥 < 13.0-88.12
citrix	gateway	13.1 ≤ 𝑥 < 13.1-33.41
citrix	application_delivery_controller_firmware	12.1 ≤ 𝑥 < 12.1-65.21
citrix	application_delivery_controller_firmware	13.0 ≤ 𝑥 < 13.0-88.12
citrix	application_delivery_controller_firmware	13.1 ≤ 𝑥 < 13.1-33.47
citrix	application_delivery_controller_firmware	12.1 ≤ 𝑥 < 12.1-55.289
citrix	application_delivery_controller_firmware	12.1 ≤ 𝑥 < 12.1-55.289

𝑥

= Vulnerable software versions

Common Weakness Enumeration

CWE-345 - Insufficient Verification of Data Authenticity
The software does not sufficiently verify the origin or authenticity of data, in a way that causes it to accept invalid data.

References

https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516

https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516