Citrix Vulnerabilities and Affected Products
Vulnerabilities associated with Session Recording.
Products
Clear product- NetScaler ADC and NetScaler Gateway15 vulnerabilities
- SD-WAN and NetScaler7 vulnerabilities
- Citrix Workspace app for Windows5 vulnerabilities
- virtual_apps_and_desktops5 vulnerabilities
- Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance4 vulnerabilities
- Citrix Gateway, Citrix ADC4 vulnerabilities
- NetScaler ADC4 vulnerabilities
- NetScaler Gateway4 vulnerabilities
- ShareFile4 vulnerabilities
- application_delivery_controller_firmware2 vulnerabilities
- Citrix ADC and Citrix Gateway2 vulnerabilities
- Citrix Application Delivery Management (Citrix ADM)2 vulnerabilities
- Citrix Secure Access Client for Windows2 vulnerabilities
- Citrix Workspace app for HTML52 vulnerabilities
- NetScaler2 vulnerabilities
- NetScaler ADC and Gateway2 vulnerabilities
- netscaler_application_delivery_controller2 vulnerabilities
- netscaler_gateway2 vulnerabilities
- Secure Access Client for Mac2 vulnerabilities
- Secure Access Client for Windows2 vulnerabilities
- secure_access_client2 vulnerabilities
- Session Recording2 vulnerabilities
- workspace_app2 vulnerabilities
- Application Delivery Controller (ADC) and Gateway1 vulnerability
- Citrix Endpoint Analysis Client for Windows1 vulnerability
| Vulnerability | Title and context | CVSS | EPSS | PoCs | Signals | STIX action |
|---|---|---|---|---|---|---|
CVE-2024-8069MEDIUM | Limited remote code execution with privilege of a NetworkService Account accessLimited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server | CVSS5.1v4.0 | EPSS14.7% | PoCs1 | SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |
CVE-2024-8068MEDIUM | Privilege escalation to NetworkService Account accessPrivilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain CWE-269Nov 12, 2024 | CVSS5.1v4.0 | EPSS1.4% | PoCs0 | SignalsListed in CISA KEVNo known ransomware useNo Nuclei templates | STIX |