CVE-2022-27506

Common vulnerabilities & exposures (CVE)

CVE database CVE database blogpost Release & EoL database

Published at: - 13-04-2022 08:15

Last modified: - 23-04-2022 04:13

Total changes: - 2

Description

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Low

Attack complexity

Network

Attack vector

None

Availability

Low

Confidentiality

None

Integrity

High

Privileges required

Unchanged

Scope

None

User interaction

2.7

Base score

1.2

1.4

Exploitability score

Impact score

Verification logic

AND

vendor=citrix AND product=sd-wan_110_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_110 AND version=-

AND

vendor=citrix AND product=sd-wan_210_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_210 AND version=-

AND

vendor=citrix AND product=sd-wan_400_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_400 AND version=-

AND

vendor=citrix AND product=sd-wan_410_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_410 AND version=-

AND

vendor=citrix AND product=sd-wan_1000_firmware AND software_edition=premium AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_1000_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_1000 AND version=-

AND

vendor=citrix AND product=sd-wan_2000_firmware AND software_edition=premium AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_2000_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_2000 AND version=-

AND

vendor=citrix AND product=sd-wan_2100_firmware AND software_edition=premium AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_2100_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_2100 AND version=-

AND

vendor=citrix AND product=sd-wan_4000_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_4000 AND version=-

AND

vendor=citrix AND product=sd-wan_4100_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_4100 AND version=-

AND

vendor=citrix AND product=sd-wan_5100_firmware AND software_edition=premium AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_5100_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_5100 AND version=-

AND

vendor=citrix AND product=sd-wan_6100_firmware AND software_edition=premium AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_6100_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_6100 AND version=-

AND

vendor=citrix AND product=sd-wan_1100_firmware AND software_edition=premium AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_1100_firmware AND software_edition=standard AND versionEndExcluding=11.4.1

vendor=citrix AND product=sd-wan_1100 AND version=-

vendor=citrix AND product=sd-wan_center_management_console AND versionEndExcluding=11.4.3

vendor=citrix AND product=sd-wan_orchestrator AND software_edition=on-premises AND versionEndExcluding=13.2.1

Reference

https://support.citrix.com/article/CTX370550

Keywords

CVE-2022-27506

Common vulnerabilities & exposures (CVE)

Description

Common Vulnerability Scoring System (CVSS)

Verification logic

Reference

NVD

CVE-2022-27506

CVE

Common vulnerabilities & exposures

CVSS

Common vulnerability scoring system

Security

Vulnerabilities

Exposures