ByteOS Network

NVD Vulnerability Details :

CVE-2024-12356

Modified

Known KEV

More Info Official Page

Source-13061848-ea10-403d-bd75-c83a022c2891

View Known Exploited Vulnerability (KEV) details

Published At-17 Dec, 2024 | 05:15

Updated At-17 Feb, 2025 | 21:15

A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

CISA Catalog

Date Added	Due Date	Vulnerability Name	Required Action
2024-12-19	2024-12-27	BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability	Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary	3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CPE Matches

BeyondTrust Corporation

>>privileged_remote_access>>Versions up to 24.3.1(inclusive)

cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*

BeyondTrust Corporation

>>remote_support>>Versions up to 24.3.1(inclusive)

cpe:2.3:a:beyondtrust:remote_support:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-77	Secondary	13061848-ea10-403d-bd75-c83a022c2891
CWE-77	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://nvd.nist.gov/vuln/detail/CVE-2024-12356	13061848-ea10-403d-bd75-c83a022c2891	Third Party Advisory US Government Resource
https://www.beyondtrust.com/trust-center/security-advisories/bt24-10	13061848-ea10-403d-bd75-c83a022c2891	Vendor Advisory
https://www.cve.org/CVERecord?id=CVE-2024-12356	13061848-ea10-403d-bd75-c83a022c2891	Third Party Advisory US Government Resource
https://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis	af854a3a-2127-422b-91ae-364da2661108	N/A

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History