Medium severity · published Jun 16, 2022
CVE-2022-27512
Temporary disruption of the ADM license service
5.3
CVSS
1%
EPSS
No
On KEV
Description
Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix ADM.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
None
Integrity
None
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.0% · higher than 63% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AD
Application Delivery Management · Citrix
before 13.0-85.19; 13.1 before 13.1-21.53 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-27512
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-27512
Vendor Advisory
https://support.citrix.com/article/CTX460016/citrix-application-delivery-management-security-bulletin-for-cve202227511-and-cve202227512
More from Application Delivery Management
10.0
CVE-2019-9548
Citrix Application Delivery Management (ADM) 12.1.x before 12.1.50.33 has Incorrect Access Control
8.8
CVE-2019-17366
Citrix Application Delivery Management (ADM) 12.1 before build 54.13 has Incorrect Access Control
8.1
CVE-2022-27511
Corruption of the system by a remote, unauthenticated user
6.5
CVE-2021-22920
A vulnerability has been discovered in Citrix ADC (formerly known as NetScaler ADC) and Citrix Gateway (formerly known as NetScaler Gateway), and Citrix SD-WAN WANOP Edition…