CVE-2024-12686—BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

漏洞名称

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

描述

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://www.beyondtrust.com/trust-center/security-advisories/bt24-11
• https://nvd.nist.gov/vuln/detail/CVE-2024-12686

相关新闻文章

• BeyondTrust warns of critical flaws in remote access softwareJuly 7, 2026
• CISA gives feds 3 days to patch actively exploited BeyondTrust flawFebruary 16, 2026
• BeyondTrust warns of critical RCE flaw in remote support softwareFebruary 9, 2026
• BeyondTrust warns of pre-auth RCE in Remote Support softwareJune 18, 2025
• PostgreSQL flaw exploited as zero-day in BeyondTrust breachFebruary 14, 2025

相关 CWE

• CWE-78