CVE-2024-12686 - BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

Vulnerability Name

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

Description

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.

Known To Be Used in Ransomware Campaigns?

Unknown

Action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Additional Notes

https://www.beyondtrust.com/trust-center/security-advisories/bt24-11

https://nvd.nist.gov/vuln/detail/CVE-2024-12686

Related News Articles

PostgreSQL flaw exploited as zero-day in BeyondTrust breachFebruary 14, 2025

BeyondTrust Zero-Day Breach Exposed 17 SaaS Customers via Compromised API KeyFebruary 1, 2025

CISA: Second BeyondTrust Vulnerability Added to KEV CatalogJanuary 16, 2025

CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active AttacksJanuary 14, 2025

CISA orders agencies to patch BeyondTrust bug exploited in attacksJanuary 14, 2025