Vulnerabilities > CVE-2022-27516 - Improper Restriction of Excessive Authentication Attempts vulnerability in Citrix Application Delivery Controller Firmware and Gateway

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

critical

NVD

Published: 2022-11-08

Updated: 2023-10-18

Summary

User login brute force protection functionality bypass

Part	Description	Count
Application	Citrix Citrix Gateway 12.1 Citrix Gateway 12.1-61.18 Citrix Gateway 12.1-62.25 Citrix Gateway 12.1-62.27 Citrix Gateway 12.1-64.16 Citrix Gateway 12.1-64.17 Citrix Gateway 13.0 Citrix Gateway 13.0-58.30 Citrix Gateway 13.0-64.35 Citrix Gateway 13.0-76.29 Citrix Gateway 13.0-82.42 Citrix Gateway 13.0-82.45 Citrix Gateway 13.0-85.19 Citrix Gateway 13.1 Citrix Gateway 13.1-21.50	15
OS	Citrix Citrix Application Delivery Controller Firmware * Citrix Application Delivery Controller Firmware 12.1	3
Hardware	Citrix Citrix Application Delivery Controller -	1