Hard-coded Credentials Vulnerability in Citrix SD-WAN Products
CVE-2022-27506

2.7LOW

Key Information:

Vendor

Citirx

Status
Citrix Sd-wan
Vendor
CVE Published:
13 April 2022

What is CVE-2022-27506?

A vulnerability exists in Citrix SD-WAN products where hard-coded credentials can be exploited, granting unauthorized administrators access to the shell via the command-line interface (CLI). This situation may lead to potential risks, including unauthorized data manipulation and system control. It is crucial for users of affected versions to apply available updates to mitigate these risks effectively.

Affected Version(s)

Citrix SD-WAN < unspecified

Citrix SD-WAN < unspecified

Citrix SD-WAN Citrix SD-WAN Orchestrator for On-Premises versions 13.2.1

References

https://support.citrix.com/article/CTX370550
x_refsource_MISC

CVSS V3.1

Score:
2.7
Severity:
LOW
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.