Vulnerabilities and Threats (Corvus Alerts)
      Back to home
      1. Knowledge Nest
      2. Cybersecurity Tips + Vulnerability Alerts
      3. Vulnerabilities and Threats (Corvus Alerts)

      Citrix Vulnerability Advisory | November 2022

      Citrix Gateway and Citrix ADC customers could be at immediate risk due to security flaws. Here's what you need to know.

      Background

      On November 8th, 2022, Citrix released an advisory detailing several security flaws (CVE-2022-27510, CVE-2022-27513, and CVE-2022-27516) in Citrix Gateway and Citrix Application Delivery Controller (ADC). Citrix Gateway is commonly used as a remote access solution and Citrix ADC is a networking appliance for web applications. Without a security patch, a remote attacker may be able to bypass authentication and gain access to an affected Gateway or ADC appliance. From there the attacker could conduct further exploitation.


      Quick facts: what you need to know now

      • Only appliances that are operating as a Gateway (appliances using the SSL VPN functionality or deployed as an ICA proxy with authentication enabled) are affected by the critical authentication bypass vulnerability CVE-2022-27510.
      • The vulnerabilities affect the following products and versions:
        • Citrix ADC and Citrix Gateway 13.1 before 13.1-33.47 
        • Citrix ADC and Citrix Gateway 13.0 before 13.0-88.12 
        • Citrix ADC and Citrix Gateway 12.1 before 12.1-65.21
        • Citrix ADC 12.1-FIPS before 12.1-55.289 
        • Citrix ADC 12.1-NDcPP before 12.1-55.289
      • This only applies to customer-managed Citrix ADC and Citrix Gateway appliances. 

      Next Steps for All Citrix Customers:

      1. Upgrade to a non-vulnerable version of ADC or Gateway as soon as possible:
        1. Citrix ADC and Citrix Gateway 13.1-33.47 and later releases 
        2. Citrix ADC and Citrix Gateway 13.0-88.12 and later releases of 13.0  
        3. Citrix ADC and Citrix Gateway 12.1-65.21 and later releases of 12.1  
        4. Citrix ADC 12.1-FIPS 12.1-55.289 and later releases of 12.1-FIPS  
        5. Citrix ADC 12.1-NDcPP 12.1-55.289 and later releases of 12.1-NDcPP
        6. Note: Please note that Citrix ADC and Citrix Gateway versions prior to 12.1 are EOL and customers on those versions are recommended to upgrade to one of the supported versions.
      2. If you require technical assistance with this issue, please  contact Citrix Technical Support.
      3. Check this article periodically over the next few weeks as we will keep it updated as more information becomes available.


        Resources

        https://support.citrix.com/article/CTX463706/citrix-gateway-and-citrix-adc-security-bulletin-for-cve202227510-cve202227513-and-cve202227516

        https://www.bleepingcomputer.com/news/security/citrix-urges-admins-to-patch-critical-adc-gateway-auth-bypass/

         

        If you have any questions, please reach out to the Risk + Response Team at services@corvusinsurance.com!