Actively exploited · Published Dec 18, 2024 · Assigned by BT
CVE-2024-12686Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
Medium 6.6 Exploited
In plain English
A medium-severity OS command injection in Remote Support(RS) & Privileged Remote Access(PRA) from BeyondTrust. Attackers are actively exploiting it in the wild (listed by CISA on January 13, 2025). The chance it is exploited in the next 30 days is estimated at 32.6% (higher than 98% of all known vulnerabilities). Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Feb 3, 2025.
Official description
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| BeyondTrust | Remote Support(RS) & Privileged Remote Access(PRA) | 0 – through 24.3.1 |
Weakness: CWE-78 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H