CVE-2023-24483— Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2023-24483
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Privilege Escalation to NT AUTHORITY\SYSTEM on the vulnerable VDA
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability has been identified that, if exploited, could result in a local user elevating their privilege level to NT AUTHORITY\SYSTEM on a Citrix Virtual Apps and Desktops Windows VDA.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
特权管理不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
Citrix Virtual Apps and Desktops 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Citrix Systems Citrix Virtual Apps and Desktops是美国思杰系统（Citrix Systems）公司的一款可为任何操作系统提供虚拟桌面和虚拟应用的虚拟软件。 Citrix Virtual Apps and Desktops存在安全漏洞，该漏洞源于存在权限提升漏洞。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Citrix | Citrix Virtual Apps and Desktops | Citrix Virtual Apps and Desktops ~ 2212 | - |
II. Public POCs for CVE-2023-24483
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-24483
请登录查看更多情报信息。
Same Patch Batch · Citrix · 2023-02-16 · 3 CVEs total
| CVE-2023-24484 | A malicious user can cause log files to be written to a directory that they do not have pe | |
| CVE-2023-24485 | Privilege Escalation on the system running a vulnerable version of Citrix Workspace app fo |
IV. Related Vulnerabilities
Same vendor: Citrix
- CVE-2025-6759
Local Privilege escalation allows a low-privileged user to g - CVE-2025-0320
Citrix Secure Access - Local Privilege escalation allows a l - CVE-2025-4879
Citrix Workspace App for Windows - Local Privilege escalatio - CVE-2025-1223
An attacker can gain application privileges in order to perf - CVE-2025-1222
An attacker can gain application privileges in order to perf
Same weakness: CWE-269
- CVE-2026-42562
Plainpad: Privilege Escalation via Writable Admin Field in P - CVE-2026-41163
bubblewrap vulnerable to privilege escalation in setuid mode - CVE-2026-44987
SysReptor: Privilege Escalation from User Admin to Superuser - CVE-2026-42185
People: Privilege Escalation via Missing Role Ceiling in Mai - CVE-2026-40001
Local privilege escalation vulnerability in ZTE PROCESS Guar
V. Comments for CVE-2023-24483
No comments yet