CVE-2024-12356

Producto

BeyondTrust / Privileged Remote Access (PRA) and Remote Support (RS)

Vulnerabilidad

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

Añadido a KEV

19 dic 2024

Remediar antes de

27 dic 2024

Uso conocido en ransomware

No

Descripción resumida

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.

Acción requerida

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 ; https://nvd.nist.gov/vuln/detail/CVE-2024-12356