CVE-2022-27511

On June 14, 2022 Citrix released patches for CVE-2022-27511, an unauthenticated remote privilege escalation in Citrix Application Delivery Management (ADM) that can corrupt an affected system to reset the administrator password at the next reboot and allow initial access via default SSH credentials; no public proof-of-concept was observed but attackers are expected to pursue exploit development, and organizations are advised to apply the provided patches and test workarounds in dev environments (see Citrix bulletin: https://support.citrix.com/article/CTX460016/citrix-application-delivery-management-security-bulletin-for-cve202227511-and-cve202227512).