CVE-2024-12356

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 ; https://nvd.nist.gov/vuln/detail/CVE-2024-12356

Remediation deadline: December 27, 2024

Description

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.

Timeline

Published:December 19th, 2024 12:00 AM

Last modified:December 19th, 2024 12:00 AM

Added to KEV:December 19th, 2024

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

BeyondTrust

Products

Privileged Remote Access (PRA) and Remote Support (RS)

Weaknesses (CWE)

CWE-77

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute