CVE-2024-8069

HighCVSS 8.0/10Known exploited (CISA KEV)Last modified Jun 17, 2026

Description

Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server

Metrics

CVSS 3.1 8.0/10CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

VendorProductVersions
Citrix Session RecordingCitrix Session Recording>= 2407 Current Release, < 24.5.200.8; >= 1912 LTSR, < CU9 hotfix 19.12.9100.6; >= 2203 LTSR, < CU5 hotfix 22.03.5100.11; >= 2402 LTSR, < CU1 hotfix 24.02.1200.16

References

Timeline

Published
Nov 12, 2024
Last modified
Jun 17, 2026
Added to CISA KEV
Aug 25, 2025
NVD status
Analyzed

Related CVEs from 2024

CVE-2024-80708.5CWE-312: Cleartext Storage of Sensitive Information vulnerability exists that exposes test credentials in the firmware binaryCVE-2024-80717.2Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to restrict which roles can promote a user as sCVE-2024-80725.3Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary usersCVE-2024-80739.8Improper Input Validation vulnerability in Hillstone Networks Hillstone Networks Web Application Firewall on 5.5R6 allows Command Injection.CVE-2024-80749.3Missing Authentication for Critical Function, Missing Authorization vulnerability in Nomysoft Informatics Nomysem allows Collect Data as ProCVE-2024-80759.8A vulnerability has been found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this vulnerability is theCVE-2024-80769.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228 and classified as critical. Affected by this issue is the function setCVE-2024-80779.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been classified as critical. This affects the function setTracCVE-2024-80789.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been declared as critical. This vulnerability affects the funcCVE-2024-80799.8A vulnerability was found in TOTOLINK AC1200 T8 4.1.5cu.862_B20230228. It has been rated as critical. This issue affects the function exportCVE-2024-80809.8A vulnerability classified as critical has been found in SourceCodester Online Health Care System 1.0. Affected is an unknown function of thCVE-2024-80819.8A vulnerability classified as critical was found in itsourcecode Payroll Management System 1.0. Affected by this vulnerability is an unknown