CVE-2024-12356 - BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
项目:BeyondTrust
产品:Privileged Remote Access (PRA) and Remote Support (RS)
添加日期:2024-12-19到期日:2024-12-27
漏洞名称
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
描述
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.
已知用于勒索软件活动吗?
Unknown
采集行动
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
其他说明
https://www.beyondtrust.com/trust-center/security-advisories/bt24-10
https://nvd.nist.gov/vuln/detail/CVE-2024-12356
相关新闻文章
BeyondTrust Flaw Used for Web Shells, Backdoors, and Data ExfiltrationFebruary 20, 2026
CISA gives feds 3 days to patch actively exploited BeyondTrust flawFebruary 16, 2026
BeyondTrust warns of critical RCE flaw in remote support softwareFebruary 9, 2026
BeyondTrust fixes easy-to-exploit pre-auth RCE vulnerability in remote access tools (CVE-2026-1731)February 9, 2026
BeyondTrust warns of pre-auth RCE in Remote Support softwareJune 18, 2025