PT-2022-5429 · Citrix · Citrix Netscaler Application Delivery Controller+2

Published 2022-11-08 · Updated 2025-12-02 · CVE-2022-27510

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Citrix ADC (formerly Citrix NetScaler Application Delivery Controller) and Citrix Gateway (formerly Citrix NetScaler Gateway) (affected versions not specified) citrix application delivery controller firmware citrix gateway

Description A security issue exists in Citrix ADC and Citrix Gateway that allows an attacker to bypass authentication through an alternative path or channel. Successful exploitation could allow a remote attacker to elevate privileges and gain unauthorized access to Gateway user capabilities.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Authentication Bypass Using an Alternate Path or Channel

Improper Authentication

Weakness Enumeration

CWE-288

CWE-287

Related Identifiers

BDU:2022-06755

CVE-2022-27510

Affected Products

Citrix Adc

Citrix Gateway

Citrix Netscaler Application Delivery Controller

References · 22

• https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-27510 · Security Note
• https://osv.dev/vulnerability/CVE-2022-27510 · Vendor Advisory
• https://bdu.fstec.ru/vul/2022-06755 · Security Note
• https://t.me/pentestingnews/31719 · Telegram Post
• https://twitter.com/DefusedCyber/status/1967538819068010858 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1nj90xz/top_10_trending_cves_17092025 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1nda3lt/top_10_trending_cves_10092025 · Reddit Post
• https://t.me/ckure/11895 · Telegram Post
• https://twitter.com/DefusedCyber/status/1965111874514477153 · Twitter Post
• https://twitter.com/DefusedCyber/status/1934845933671362944 · Twitter Post
• https://twitter.com/DefusedCyber/status/1995451557081456676 · Twitter Post
• https://t.me/cybersecuritytechnologies/7620 · Telegram Post
• https://twitter.com/DefusedCyber/status/1937437493214765122 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1nidccg/top_10_trending_cves_16092025 · Reddit Post