CVE-2024-8069

highpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.211 · 98 %ileexploit · PoCDEEUNLRUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 1 exploit · PoC

Likely / severe?

21.1% (98th) EPSS

CVSS 8 · high

Is it mine?

24 products

Check your exposure

Who says so?

6 sources

cnnvd · enisa_euvd · fstec_bdu · cert_bund

added 2025-08-25remediate by 2025-09-15

required action Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

EPSS · scored 2026-10-27

Citrix Session Recording Deserialization of Untrusted Data Vulnerability

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

cvss

Technical severity, 0–10. One row per scoring source.

8.8

010

base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · medium–high · 5.1–8.8

v3.18highCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USexploitability 2.1 · impact 5.9

v3.18.8highAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v4.05.1mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:Nsecondary · ENISA EU

v4.05.1mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · secure@citrix.com

v4.05.1mediumCVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Xsecondary · CVSS-BT (t0sche)

ssvc

A stakeholder decision — act, attend, or track — from exploitation and impact.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

weaknesses

The CWE weakness classes this flaw belongs to.

CWE-502USCWE-502USCWE-502USCWE-94US

exploits (1)

Public proof-of-concept and weaponised exploit code.

mdiqbalahmad/cve-2024-8069-exp-Citrix-Virtual-Apps-XENCitrix Virtual Apps and Desktops (XEN) Unauthenticated RCEPoC · poc_in_github

affected products (24)

Products and version ranges known to be affected.

Citrix Systems Virtual Apps and Desktops 1912 LTSR <CU9 hotfix 19.12.9100.6all versionscert_bundDE
Citrix Systems Virtual Apps and Desktops 2203 LTSR <CU5 hotfix 22.03.5100.11all versionscert_bundDE
Citrix Systems Virtual Apps and Desktops 2402 LTSR <CU1 hotfix 24.02.1200.16all versionscert_bundDE
Citrix Systems Virtual Apps and Desktops <2407 hotfix 24.5.200.8all versionscert_bundDE
Citrix Systems Virtual Apps and Desktops≤ 2402 LTSR <CU1 hotfix 24.02.1200.16cert_bundDE
Citrix Systems Virtual Apps and Desktops≤ 1912 LTSR <CU9 hotfix 19.12.9100.6cert_bundDE
Citrix Systems Virtual Apps and Desktops≤ 2203 LTSR <CU5 hotfix 22.03.5100.11cert_bundDE
Citrix Systems Virtual Apps and Desktops< 2407 hotfix 24.5.200.8cert_bundDE
Citrix Session Recording Citrix Session Recording1912 LTSR → CU9 hotfix 19.12.9100.6enisa_euvdEU
Citrix Session Recording Citrix Session Recording2203 LTSR → CU5 hotfix 22.03.5100.11enisa_euvdEU
Citrix Session Recording Citrix Session Recording2402 LTSR → CU1 hotfix 24.02.1200.16enisa_euvdEU
Citrix Session Recording Citrix Session Recording2407 Current Release → 24.5.200.8enisa_euvdEU
Citrix Systems Inc. Citrix Virtual Apps and Desktops (CVAD)≤ 2407fstec_bduRU
Citrix Systems Inc. Citrix Virtual Apps and Desktops (CVAD)≤ 2402 LTSR CU1fstec_bduRU
Citrix Systems Inc. Citrix Virtual Apps and Desktops (CVAD)≤ 2203 LTSR CU5fstec_bduRU
Citrix Systems Inc. Citrix Virtual Apps and Desktops (CVAD)≤ 1912 LTSR CU9fstec_bduRU
citrix_session_recordingall versionsncsc_nlNLcpe:2.3:a:citrix_session_recording:citrix_session_recording:*:*:*:*:*:*:*:*
virtual_apps_and_desktopsall versionsncsc_nlNLcpe:2.3:a:citrix:virtual_apps_and_desktops:1912:-:*:*:ltsr:*:*:*
virtual_apps_and_desktopsall versionsncsc_nlNLcpe:2.3:a:citrix:virtual_apps_and_desktops:2203:-:*:*:ltsr:*:*:*
citrix session recording< 2407nvdUScpe:2.3:a:citrix:session_recording:*:*:*:*:*:*:*:*

showing 20 of 24

advisories (2)

Vendor and ecosystem advisories describing this.

NCSC-2024-0440Kwetsbaarheden verholpen in Citrix Session RecordingNL2024-11-13csaf · ncsc_nlNL
Citrix heeft kwetsbaarheden verholpen in Citrix Session Recording
WID-SEC-W-2024-3443Citrix Systems Virtual Apps and Desktops: Mehrere SchwachstellenDeutsch2024-11-12csaf · cert_bundDE
Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Citrix Systems Virtual Apps and Desktops ausnutzen, um seine Privilegien zu erhöhen und Code auszuführen.

also known as (4)

Other names and identifiers for this entity.

sources

Which sources assert this record, and when.

cnnvd enisa_euvd fstec_bdu cert_bund ncsc_nl nvd NVD CVE.org MITRE

published 2024-11-12modified 2026-06-17

references (5)

External citations — patches, advisories, analysis.

scry

Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.

Free scan