Such issues have stemmed from a misconfigured Microsoft Message Queuing instance leveraging BinaryFormatter, which Microsoft has warned against amid the emergence of deserialization vulnerabilities, according to the watchTowr report. While Citrix has emphasized the issue as an authenticated RCE, which requires execution as a NetworkService Account, the firm was noted by watchTowr researchers to have been “downplaying”

Source: SC Magazine