Citrix Systems Virtual Apps and Desktops: Mehrere Schwachstellen

Summary

Product

Vulnerabilities 2

• Medium 5.1
  CVE-2024-8068 Exploited Public exploit

  Privilege escalation to NetworkService Account access

  Privilege escalation to NetworkService Account access in Citrix Session Recording when an attacker is an authenticated user in the same Windows Active Directory domain as the session recording server domain

  Citrix Citrix Session Recording Network devices
  Nov 12, 2024

  KEV Aug 25, 2025
• Medium 5.1
  CVE-2024-8069 Exploited Public exploit EPSS 18%

  Limited remote code execution with privilege of a NetworkService Account access

  Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

  Citrix Session Recording Citrix Session Recording Network devices
  Nov 12, 2024

  KEV Aug 25, 2025

Revision history

1. 2025-08-25 #3

   Exploit aufgenommen

2. 2024-11-13 #2

   PoC aufgenommen

3. 2024-11-12 #1

   Initiale Fassung

References

• Citrix Security Bulletin CTX691941 vom 2024-11-12
  https://support.citrix.com/s/article/CTX691941-citrix-session-recording-security-bulletin-for-cve20248068-and-cve20248069?language=en_US
• PoC auf GitHub vom 2024-11-13
  https://github.com/watchtowrlabs/Citrix-Virtual-Apps-XEN-Exploit
• CISA KEV Catalog vom 2025-08-26
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog