CVE Watch—

CVE-2024-12356

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVSS

—

Sem CVSS

EPSS

87.4%

p100

KEV

SIM

19 de dez. de 2024

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

87.3%EPSS · 30 dias87.4%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

BeyondTrust / Privileged Remote Access (PRA) and Remote Support (RS)

Vulnerabilidade

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

Adicionado ao KEV

19 de dez. de 2024

Corrigir até

27 de dez. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 ; https://nvd.nist.gov/vuln/detail/CVE-2024-12356

CVEs relacionados

Nenhum CVE relacionado por CWE ou produto.