CVE Vulnerability Advisory Database

Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.

Showing 1–1 of 1 advisories (Page 1/1)

CVE-2024-123569.8/CRITICALEPSS 87.4%CISA KEV

2024-12-17

BeyondTrust Privileged Remote Access (PRA) & Remote Support (RS) Unauthenticated Remote Command Injection Vulnerability (CVE-2024-12356) Security Advisory

[Affected Scope] BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) affected versions

[Impact] Unauthenticated remote attackers can inject and execute arbitrary system commands with the privileges of the 'site user'.

[Mitigation] Immediately apply the official security patches provided by BeyondTrust (BT24-10) and restrict access to management interfaces.