Loading HuntDB...

CVE-2024-8069

UNKNOWN
Published 2024-11-12T18:01:15.375Z
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2024-8069. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

Available Exploits

No exploits available for this CVE.

Related News

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. CVE-2024-8069 Citrix Session Recording Deserialization of Untrusted Data Vulnerability CVE-2024-8068 Cit…

Cisa.gov 2025-08-25 12:00

Affected Products

Known Exploited Vulnerability

This vulnerability is actively being exploited in the wild

View KEV Details

Remediation Status

Due Soon

Due Date

September 15, 2025 (6 days remaining)

Added to KEV

August 25, 2025

Required Action

Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.

Affected Product

Vendor/Project: Citrix
Product: Session Recording

Ransomware Risk

Known Ransomware Use
KEV Catalog Version: 2025.08.25 Released: August 25, 2025

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-ww66-45gm-65fm

Advisory Details

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Advisory provided by GitHub Security Advisory Database. Published: November 12, 2024, Modified: August 26, 2025

Social Media Intelligence

Real-time discussions and threat intelligence from social platforms

2 posts
Reddit 1 week, 5 days ago
crstux
Exploit

🔥 Top 10 Trending CVEs (28/08/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-57811](https://nvd.nist.gov/vuln/detail/CVE-2025-57811)** - 📝 Craft is a platform for creating digital experiences. From versions 4.0.0-RC1 to 4.16.5 and 5.0.0-RC1 to 5.8.6, there is a potential remote code execution vulnerability via Twig SSTI …

1
1.0
View Original High Risk
Reddit 1 week, 6 days ago
crstux
Exploit

🔥 Top 10 Trending CVEs (27/08/2025) Here’s a quick breakdown of the 10 most interesting vulnerabilities trending today: **1. [CVE-2025-7775](https://nvd.nist.gov/vuln/detail/CVE-2025-7775)** - 📝 Memory overflow vulnerability leading to Remote Code Execution and/or Denial of Service in NetScaler ADC and NetScaler Gateway whenNetScaler is configured as Gateway (VPN virtual server, ICA Proxy, …

1
1.0
View Original High Risk

References

Published: 2024-11-12T18:01:15.375Z
Last Modified: 2025-08-25T17:39:54.601Z
Copied to clipboard!