High severity8.0CISA KEVNVD Advisory· Published Nov 12, 2024· Updated Jun 17, 2026
CVE-2024-8069
CVE-2024-8069
Description
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
19cpe:2.3:a:citrix:session_recording:*:*:*:*:-:*:*:*+ 18 more
- cpe:2.3:a:citrix:session_recording:*:*:*:*:-:*:*:*range: <2407
- cpe:2.3:a:citrix:session_recording:1912:-:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu1:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu2:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu3:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu4:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu5:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu6:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu7:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:1912:cu8:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:-:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:cu1:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:cu2:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:cu3:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2203:cu4:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2402:-:*:*:ltsr:*:*:*
- cpe:2.3:a:citrix:session_recording:2407:-:*:*:-:*:*:*
- (no CPE)
- (no CPE)range: 2407 Current Release
Patches
Vulnerability mechanics
References
2- support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069nvdVendor Advisory
- www.cisa.gov/known-exploited-vulnerabilities-catalognvdUS Government Resource
News mentions
0No linked articles in our index yet.