CVE-2024-12284

High

Published: 20 February 2025

Published

20 February 2025

Modified

25 July 2025

KEV Added

—

Patch

—

CVSS Score 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS Score 0.0424 88.8th percentile

Risk Priority 20 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-12284 is a high-severity Improper Privilege Management (CWE-269) vulnerability in Citrix Netscaler Console. Its CVSS base score is 8.8 (High).

Operationally, ranked in the top 11.2% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 AC-2 (Account Management) and AC-3 (Access Enforcement).

Threat & Defense at a Glance

What defenders deploy: see the NIST 800-53 controls recommended below.

Threat & Defense Details

Mitigating Controls (NIST 800-53 r5)AI

AC-6 Least Privilege good match

prevent

Directly counters CWE-269 Improper Privilege Management by enforcing least privilege, preventing low-privileged authenticated users from escalating privileges in NetScaler Console and Agent.

AC-3 Access Enforcement good match

prevent

Enforces approved access authorizations to block unauthorized privilege escalations attempted by authenticated low-privilege attackers over the network.

AC-2 Account Management good match

prevent

Manages accounts to ensure privileges are properly assigned, reviewed, and revoked, mitigating flaws in privilege handling within affected NetScaler components.

NVD Description

Authenticated privilege escalation in NetScaler Console and NetScaler Agent allows.

Deeper analysisAI

CVE-2024-12284 is an authenticated privilege escalation vulnerability affecting NetScaler Console and NetScaler Agent. Published on 2025-02-20, it carries a CVSS v3.1 base score of 8.8 (High), with vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H, and is associated with CWE-269 (Improper Privilege Management).

The vulnerability can be exploited by an authenticated attacker with low privileges over the network, requiring low complexity and no user interaction. Successful exploitation enables high-impact consequences, including unauthorized access to confidential data, modification of system integrity, and disruption of availability through escalated privileges.

Citrix has published a security bulletin addressing CVE-2024-12284 at https://support.citrix.com/s/article/CTX692579-netscaler-console-and-netscaler-agent-security-bulletin-for-cve202412284?language=en_US, which details mitigations and available patches for affected NetScaler Console and NetScaler Agent deployments.