CVE-2022-27513— Remote desktop takeover via phishing
Quick assessment
Affected
Citrix Citrix Gateway, Citrix ADC
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Citrix Systems Citrix Gateway（Citrix Systems NetScaler Gateway）和Citrix ADC都是美国思杰系统（Citrix Systems）公司的产品。Citrix Gateway是一套安全的远程接入解决方案。该产品可为管理员提供应用级和数据级管控功能，以实现用户从任何地点远程访问应用和数据。Citrix ADC是一个最全面的应用程序交付和负载平衡解决方案。用于实现应用程序安全性、整体可见性和可用性。 Citrix Gateway和Citrix AD
Possible ATT&CK Techniques 2 AI
T1210 · Exploitation of Remote Services T1566.001 · Spearphishing Attachment
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2022-27513
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Remote desktop takeover via phishing
Source: CVE Program / CVE List V5
Vulnerability Description
Remote desktop takeover via phishing
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对数据真实性的验证不充分
Source: CVE Program / CVE List V5
Vulnerability Title
Citrix Gateway和Citrix ADC 数据伪造问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Citrix Systems Citrix Gateway（Citrix Systems NetScaler Gateway）和Citrix ADC都是美国思杰系统（Citrix Systems）公司的产品。Citrix Gateway是一套安全的远程接入解决方案。该产品可为管理员提供应用级和数据级管控功能，以实现用户从任何地点远程访问应用和数据。Citrix ADC是一个最全面的应用程序交付和负载平衡解决方案。用于实现应用程序安全性、整体可见性和可用性。 Citrix Gateway和Citrix AD
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Citrix | Citrix Gateway, Citrix ADC | 0 | - |
|
II. Public POCs for CVE-2022-27513
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2022-27513
请登录查看更多情报信息。
Vendor Advisories for CVE-2022-27513 (1)
Same Patch Batch · Citrix · 2022-11-08 · 3 CVEs total
| CVE-2022-27510 | 9.8 CRITICAL | Unauthorized access to Gateway user capabilities |
| CVE-2022-27516 | 5.3 MEDIUM | User login brute force protection functionality bypass |
IV. Related Vulnerabilities
Same vendor: Citrix
-
CVE-2026-78547
Out-of-Bounds Write -
CVE-2026-18751
Citrix Workspace App for Mac Security Bulletin for CVE-2026- -
CVE-2026-53566
Out-of-bounds memory read -
CVE-2026-53565
Local Privilege escalation allows a low-privileged user to g -
CVE-2025-6759
Local Privilege escalation allows a low-privileged user to g
Same weakness: CWE-345
-
CVE-2026-104422
Zebra before 6.3.0 Block Sync Denial of Service via Coinbase -
CVE-2026-104419
Zebra before 6.3.0 Honest Peer Banning via Far-Ahead FindBlo -
CVE-2026-103878
Apache Directory LDAP API: Injection of plaintext responses -
CVE-2026-102140
Kiteworks Core Insufficient Verification of Data Authenticit -
CVE-2026-55174
UltrafastSecp256k1: ECDSA adaptor verification accepts non-a
V. Comments for CVE-2022-27513
No comments yet