Citrix patches critical ADC flaw the NSA says is already under attack from China

The China-linked crime gang APT5 is already attacking a flaw in Citrix's Application Delivery Controller (ADC) and Gateway products that the vendor patched today. Citrix says the flaw, CVE-2022-27518, "could allow an unauthenticated remote attacker to perform arbitrary code execution on the appliance" if it is configured as a …

[kz20fl2]

ADC has been renamed back to NetScaler since Citrix were acquired, so it's no longer "formerly" known as NetScaler

[NoneSuch]

I'm Psychic.

I would bet the next move by the NSA will be national firewalls to "keep us safe". Anything international is routed through there first. Then the NSA decide what traffic (or communications) are allowed.

Willing to bet serious beer money on that.

[Anonymous Coward]

Demand driven failure

IMHO the people who are buying Citrix products are to blame. If they did a Rip and Replace Citrix would go out of business.