CVE-2022-27506

LOW

Citrix SD-WAN Firmware < 11.4.1 - Use of Hard-coded Credentials via SD-WAN CLI

Title source: llm
STIX 2.1

Description

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.citrix.com/article/CTX370550

Scores

CVSS v3 2.7
EPSS 0.0017
EPSS Percentile 37.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N

Details

CWE
CWE-798
Status published
Products (14)
citrix/sd-wan_1000_firmware < 11.4.1 (2 CPE variants)
citrix/sd-wan_1100_firmware < 11.4.1 (2 CPE variants)
citrix/sd-wan_110_firmware < 11.4.1
citrix/sd-wan_2000_firmware < 11.4.1 (2 CPE variants)
citrix/sd-wan_2100_firmware < 11.4.1 (2 CPE variants)
citrix/sd-wan_210_firmware < 11.4.1
citrix/sd-wan_4000_firmware < 11.4.1
citrix/sd-wan_400_firmware < 11.4.1
citrix/sd-wan_4100_firmware < 11.4.1
citrix/sd-wan_410_firmware < 11.4.1
... and 4 more
Published Apr 13, 2022
Tracked Since Feb 18, 2026