by Daniel Ruiz
Practice Lead, Citrix Technologies
Today Citrix announced new vulnerabilities discovered in Citrix ADC and Citrix Gateway (NetScaler) that could result in a denial of service.
CVE-2022-27507 (Medium severity)
The following supported versions of Citrix ADC and Citrix Gateway are affected by this vulnerability if DTLS is enabled and either ‘HDX Insight for EDT traffic’ and/or ‘SmartControl’ have been configured.
Citrix ADC and Citrix Gateway are vulnerable if both of the following conditions are met:
CVE-2022-27508 (High severity)
The only supported version of Citrix ADC and Citrix Gateway affected by this vulnerability is Citrix ADC and Citrix Gateway 12.1-64.16
All other supported versions of Citrix ADC and Citrix Gateway, including FIPS and NDcPP versions are not affected by this issue.
Solution / Workarounds:
Citrix recommends that affected customers install the relevant updated versions of Citrix ADC or Citrix Gateway as soon as possible.
Customers who are only impacted by CVE-2022-27507 and have DTLS enabled and have configured ‘HDX Insight for EDT traffic’ or ‘SmartControl’ can alternatively disable ‘HDX Insight for EDT traffic’ to address the issue without upgrading.
If you would like more information or assistance from our industry leading team of Citrix experts to plan and execute the upgrade, please contact us at email@example.com.