CVE-2024-8069Limited remote code execution with privilege of a NetworkService Account access

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

5.1 MEDIUMEPSS 18.19%⚡ Known Exploited (CISA KEV)NVD: Published

Last updated: 2025-10-21 22:55 UTC

OverviewCVSS details

5.1MEDIUMCVSS 4.0

Score source: Citrix (CNA)
NVD status: Published
Published: Nov 12, 2024
Assigner: Citrix

Affected

Citrix Session Recording (Citrix Session Recording)

Versions: 2407 Current Release before 24.5.200.8 · 1912 LTSR before CU9 hotfix 19.12.9100.6
Fixed in: 24.5.200.8, CU9 hotfix 19.12.9100.6, CU5 hotfix 22.03.5100.11

All affected versions →

Exploitation

Public exploit: None listed
CISA KEV: Listed · Aug 25, 2025
KEV due date: Sep 15, 2025
Ransomware use: Unknown
SSVC: Exploitation active · Automatable no · Impact total

EPSS · FIRST, scored Nov 7

18.19%chance of exploitation in 30 days

Higher than 97.22% of CVEs

CVSS 4.0 · Citrix (CNA)

5.1Medium

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Attack vector: Adjacent
Attack complexity: Low
Attack requirements: None
Privileges required: Low
User interaction: None
Confidentiality impact: Low
Integrity impact: Low
Availability impact: Low
Confidentiality (other systems): None
Integrity (other systems): None
Availability (other systems): None

NVD status: Published

Overview Affected Products References

NVD CVE.org

Overview

Severity

Score	Severity	Version	Vector String
5.1	MEDIUM	4.0Citrix (CNA)	CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Details

CVE ID: CVE-2024-8069
Status: Published
Assigner (CNA): Citrix
Published: Nov 12, 2024
Last modified: 2025-10-21 22:55 UTC
Weaknesses: CWE-502 · Deserialization of Untrusted Data

Sources

NVD (unavailable at last refresh)
CVE.org
CISA KEV
FIRST EPSS

Refreshed hourly from the sources above. Last fetched 2026-11-07 15:44 UTC.