CVE-2024-12686 - BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
Project:BeyondTrust
Product:Privileged Remote Access (PRA) and Remote Support (RS)
Date Added:2025-01-13Due Date:2025-02-03
Vulnerability Name
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability
Description
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.
Known To Be Used in Ransomware Campaigns?
Unknown
Action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Additional Notes
https://www.beyondtrust.com/trust-center/security-advisories/bt24-11
https://nvd.nist.gov/vuln/detail/CVE-2024-12686
Related News Articles
PostgreSQL flaw exploited as zero-day in BeyondTrust breachFebruary 14, 2025
BeyondTrust Zero-Day Breach Exposed 17 SaaS Customers via Compromised API KeyFebruary 1, 2025
CISA: Second BeyondTrust Vulnerability Added to KEV CatalogJanuary 16, 2025
CISA Adds Second BeyondTrust Flaw to KEV Catalog Amid Active AttacksJanuary 14, 2025
CISA orders agencies to patch BeyondTrust bug exploited in attacksJanuary 14, 2025
