Citrix · Session Recording
CVE-2024-8069
Limited remote code execution with privilege of a NetworkService Account access
Qué es
Limited remote code execution with privilege of a NetworkService Account access in Citrix Session Recording if the attacker is an authenticated user on the same intranet as the session recording server
CISA: Citrix Session Recording contains a deserialization of untrusted data vulnerability that allows limited remote code execution with privilege of a NetworkService Account access. Attacker must be an authenticated user on the same intranet as the session recording server.
Qué hacer
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Plazo para las agencias federales de EE. UU.: 15 de septiembre de 2025
Más fallos explotados de Citrix
| Añadido | Vulnerabilidad | Producto | Gravedad | Prob. de ataque |
|---|---|---|---|---|
| 25 ago 2025 | Improper Privilege Management | Session Recording | Media 5,1 | 3,5% |
| 4 oct 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | Alto 8,7 | 11% |
| 27 sept 2026 | Improper Input Validation | NetScaler | Crítica 9,5 | 82% |
| 27 sept 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler | Crítica 9,5 | 78% |
| 9 sept 2026 | Authentication Bypass Using an Alternate Path or Channel | NetScaler | Crítica 9,3 | 33% |
| 26 ago 2026 | Improper Restriction of Operations within the Bounds of a Memory Buffer | NetScaler ADC and NetScaler Gateway | Alto 8,8 | 1,0% |
| 30 mar 2026 | Out-of-Bounds Read | NetScaler | Crítica 9,3 | 91% |
| 26 ago 2025 | Memory Overflow | NetScaler | Crítica 9,2 | 21% |
Fuentes: Known Exploited Vulnerabilities (CISA, dominio público), CVE records (cve.org) y EPSS (FIRST). La probabilidad de ataque es la estimación EPSS de que alguien intente explotar el fallo en los próximos 30 días.