CVE-2022-27506
2.7 lowEPSS 0.7%
Low (2.7) in citrix. EPSS 0.7% chance of exploitation in the next 30 days.
Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI
Severity
CVSS 3.1
2.7 lowCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N- EPSS
- 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-11-01)
- CWE
- CWE-798
- Published
- Modified
- Record from
- the NVD, synced
Affected
- citrix:sd-wan_1000_firmware
- citrix:sd-wan_1100_firmware
- citrix:sd-wan_110_firmware
- citrix:sd-wan_2000_firmware
- citrix:sd-wan_2100_firmware
- citrix:sd-wan_210_firmware
- citrix:sd-wan_4000_firmware
- citrix:sd-wan_400_firmware
- citrix:sd-wan_4100_firmware
- citrix:sd-wan_410_firmware
- citrix:sd-wan_5100_firmware
- citrix:sd-wan_6100_firmware
- citrix:sd-wan_center_management_console
- citrix:sd-wan_orchestrator
References
Check your stackJSON