CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-8069

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

Exploit prediction scoring system (EPSS) score

EPSS Score 0.445

EPSS Ranking 97.5%

CVSS Severity

CVSS v3 Score 8.0

Proposed Action

Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.

Ransomware Campaign

Unknown

References

https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US

Products affected by CVE-2024-8069

Citrix » Session Recording » Version: 1912

cpe:2.3:a:citrix:session_recording:1912
Citrix » Session Recording » Version: 2103

cpe:2.3:a:citrix:session_recording:2103
Citrix » Session Recording » Version: 2104

cpe:2.3:a:citrix:session_recording:2104
Citrix » Session Recording » Version: 2106

cpe:2.3:a:citrix:session_recording:2106
Citrix » Session Recording » Version: 2107

cpe:2.3:a:citrix:session_recording:2107
Citrix » Session Recording » Version: 2109

cpe:2.3:a:citrix:session_recording:2109
Citrix » Session Recording » Version: 2110

cpe:2.3:a:citrix:session_recording:2110
Citrix » Session Recording » Version: 2112

cpe:2.3:a:citrix:session_recording:2112
Citrix » Session Recording » Version: 2201

cpe:2.3:a:citrix:session_recording:2201
Citrix » Session Recording » Version: 2203

cpe:2.3:a:citrix:session_recording:2203
Citrix » Session Recording » Version: 2204

cpe:2.3:a:citrix:session_recording:2204
Citrix » Session Recording » Version: 2206

cpe:2.3:a:citrix:session_recording:2206
Citrix » Session Recording » Version: 2207

cpe:2.3:a:citrix:session_recording:2207
Citrix » Session Recording » Version: 2209

cpe:2.3:a:citrix:session_recording:2209
Citrix » Session Recording » Version: 2210

cpe:2.3:a:citrix:session_recording:2210
Citrix » Session Recording » Version: 2212

cpe:2.3:a:citrix:session_recording:2212
Citrix » Session Recording » Version: 2303

cpe:2.3:a:citrix:session_recording:2303
Citrix » Session Recording » Version: 2305

cpe:2.3:a:citrix:session_recording:2305
Citrix » Session Recording » Version: 2308

cpe:2.3:a:citrix:session_recording:2308
Citrix » Session Recording » Version: 2311

cpe:2.3:a:citrix:session_recording:2311
Citrix » Session Recording » Version: 2402

cpe:2.3:a:citrix:session_recording:2402
Citrix » Session Recording » Version: 2407

cpe:2.3:a:citrix:session_recording:2407
Citrix » Session Recording » Version: 7.15

cpe:2.3:a:citrix:session_recording:7.15

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2024-8069

Products

Pricing

Contact Us