VULNERABILITY INTELLIGENCE
CVE-2022-27511
CVSS score8.1 HIGH
EPSS probability12.69%
CISA KEVNot currently listed
Published2022-06-16
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the next device reboot, allowing an attacker with ssh access to connect with the default administrator credentials after the device has rebooted.
Weakness classification
- secure@citrix.com: CWE-284
- nvd@nist.gov: NVD-CWE-Other
Primary references
- secure@citrix.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory