CVE-2022-27506: Citrix SD-WAN 1000 Firmware

Low severity, CVSS 2.7. EPSS: 0.7% chance of exploitation in the next 30 days.

Hard-coded credentials allow administrators to access the shell via the SD-WAN CLI

Affected products

• Citrix SD-WAN 1000 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 1100 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 110 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 2000 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 2100 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 210 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 4000 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 400 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 4100 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 410 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 5100 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN 6100 Firmware: before 11.4.1 (fixed in 11.4.1)
• Citrix SD-WAN Center Management Console: before 11.4.3 (fixed in 11.4.3)
• Citrix SD-WAN Orchestrator: before 13.2.1 (fixed in 13.2.1)

Published 2022-04-13. Last modified 2026-06-17.