CVE-2022-27513

CriticalCVSS 9.6/10Last modified Jun 17, 2026

Description

Remote desktop takeover via phishing

Metrics

CVSS 3.1 9.6/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Weakness enumeration

CWE-345

Affected software

VendorProductVersions
CitrixCitrix Gateway, Citrix ADC 0

References

Timeline

Published
Nov 8, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-275169.8User login brute force protection functionality bypassCVE-2022-275189.8Unauthenticated remote arbitrary code executionCVE-2022-27527.8A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conCVE-2022-275237.1A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maCVE-2022-275247.1An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using aCVE-2022-275257.8A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wrCVE-2022-275267.8A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerabCVE-2022-275277.8A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0CVE-2022-275287.8A maliciously crafted DWFX and SKP files in Autodesk Navisworks 2022 can be used to trigger use-after-free vulnerability. Exploitation of thCVE-2022-275297.8A maliciously crafted PICT, BMP, PSD or TIF file in Autodesk AutoCAD 2022, 2021, 2020, 2019 may be used to write beyond the allocated bufferCVE-2022-27536.1The Ketchup Restaurant Reservations WordPress plugin through 1.0.0 does not sanitise and escape some of the reservation user inputs, allowinCVE-2022-275307.8A maliciously crafted TIF or PICT file in Autodesk AutoCAD 2022, 2021, 2020, 2019 can be used to write beyond the allocated buffer through B
CVE-2022-27513: Critical severity, CVSS 9.6 | Vulnix