CVE-2024-12356 - BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

BeyondTrust | Privileged Remote Access (PRA) and Remote Support (RS)

• Date Added:
• 2024-12-19

• Due Date:
• 2024-12-27

Vulnerability Name

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

Description

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 ; https://nvd.nist.gov/vuln/detail/CVE-2024-12356

Related News Articles

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active AttacksJanuary 14, 2025

CISA orders agencies to patch BeyondTrust bug exploited in attacksJanuary 14, 2025

Thousands of BeyondTrust Systems Remain ExposedJanuary 4, 2025

Thousands of Buggy BeyondTrust Systems Remain ExposedJanuary 4, 2025

Chinese APT Exploits BeyondTrust API Key to Access U.S. Treasury Systems and DocumentsDecember 31, 2024