CVE-2024-8069

🗓️ 12 Nov 2024 18:01:15Reported by CitrixType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 96 Views

Limited remote code execution with NetworkService Account access in Citrix Session Recording for authenticated intranet user

Reporter	Title	Published	Views	Family All 22
BDU FSTEC	The vulnerability of the Session Recording software component, which is used for virtualizing and delivering Citrix Virtual Apps and Desktops (formerly XenApp and XenDesktop), allows a perpetrator to execute arbitrary code.	22 Nov 202400:00	–	bdu_fstec
Circl	CVE-2024-8069	12 Nov 202416:21	–	circl
CISA KEV Catalog	Citrix Session Recording Deserialization of Untrusted Data Vulnerability	25 Aug 202500:00	–	cisa_kev
CISA	CISA Adds Three Known Exploited Vulnerabilities to Catalog	25 Aug 202512:00	–	cisa
CISA	Citrix Releases Security Updates for NetScaler and Citrix Session Recording	12 Nov 202412:00	–	cisa
Tenable Nessus	Citrix Virtual Apps and Desktops Session Recording Multiple Vulnerabilities (CTX691941)	14 Nov 202400:00	–	nessus
CNNVD	Citrix Systems Virtual Apps and Desktops 安全漏洞	12 Nov 202400:00	–	cnnvd
Citrix	Citrix Session Recording Security Bulletin for CVE-2024-8068 and CVE-2024-8069	12 Nov 202407:00	–	citrix
Cvelist	CVE-2024-8069 Limited remote code execution with privilege of a NetworkService Account access	12 Nov 202418:01	–	cvelist
NCSC	Vulnerabilities fixed in Citrix Session Recording	13 Nov 202408:51	–	ncsc

NVD

Node

citrix session_recordingRange<2407-

citrix session_recordingMatch1912-ltsr

citrix session_recordingMatch1912cu1ltsr

citrix session_recordingMatch1912cu2ltsr

citrix session_recordingMatch1912cu3ltsr

citrix session_recordingMatch1912cu4ltsr

citrix session_recordingMatch1912cu5ltsr

citrix session_recordingMatch1912cu6ltsr

citrix session_recordingMatch1912cu7ltsr

citrix session_recordingMatch1912cu8ltsr

citrix session_recordingMatch2203-ltsr

citrix session_recordingMatch2203cu1ltsr

citrix session_recordingMatch2203cu2ltsr

citrix session_recordingMatch2203cu3ltsr

citrix session_recordingMatch2203cu4ltsr

citrix session_recordingMatch2402-ltsr

citrix session_recordingMatch2407--

[
  {
    "defaultStatus": "unaffected",
    "product": "Citrix Session Recording",
    "vendor": "Citrix Session Recording",
    "versions": [
      {
        "lessThan": "24.5.200.8",
        "status": "affected",
        "version": "2407 Current Release",
        "versionType": "patch"
      },
      {
        "lessThan": "CU9 hotfix 19.12.9100.6",
        "status": "affected",
        "version": "1912 LTSR",
        "versionType": "patch"
      },
      {
        "lessThan": "CU5 hotfix 22.03.5100.11",
        "status": "affected",
        "version": "2203 LTSR",
        "versionType": "patch"
      },
      {
        "lessThan": "CU1 hotfix 24.02.1200.16",
        "status": "affected",
        "version": "2402 LTSR",
        "versionType": "patch"
      }
    ]
  }
]

Source	Link
support	www.support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

17 Jun 2026 08:21Current

9High risk

Vulners AI Score9

CVSS 3.18

CVSS 45.1

EPSS0.14736

SSVC