CVE-2024-12284

CVE-2024-12284 is an authenticated privilege escalation vulnerability affecting NetScaler Console and NetScaler Agent. Published on 2025-02-20, it carries a CVSS v3.1 base score of 8.8 (High), with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, and is associated with CWE-269 (Improper Privilege Management).

The vulnerability can be exploited by an authenticated attacker with low privileges over the network, requiring low complexity and no user interaction. Successful exploitation enables high-impact consequences, including unauthorized access to confidential data, modification of system integrity, and disruption of availability through escalated privileges.

Citrix has published a security bulletin addressing CVE-2024-12284 at https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US, which details mitigations and available patches for affected NetScaler Console and NetScaler Agent deployments.