BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

🗓️ 13 Jan 2025 00:00:00Reported by CISAType

cisa_kev

cisa_kev🔗 www.cisa.gov👁 12 Views

OS command injection vulnerability in BeyondTrust PRA and RS allows remote execution by attackers.

Reporter	Title	Published	Views	Family All 20
ATTACKERKB	CVE-2024-12686	18 Dec 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Remote Support remote support tool and the Privileged Remote Access remote access tool lies in the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to enhance their privileges and execute arbitrary commands.	27 Jan 202500:00	–	bdu_fstec
Tenable Nessus	BeyondTrust Privileged Remote Access (PRA) <= 24.3.1 Multiple Vulnerabilities	2 Jan 202500:00	–	nessus
Tenable Nessus	BeyondTrust Remote Support (RS) <= 24.3.1 Command Injection (BT24-11)	8 Jul 202600:00	–	nessus
Circl	CVE-2024-12686	18 Dec 202420:30	–	circl
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	13 Jan 202512:00	–	cisa
CNNVD	BeyondTrust Privileged Remote Access 安全漏洞	18 Dec 202400:00	–	cnnvd
CVE	CVE-2024-12686	18 Dec 202420:23	–	cve
Cvelist	CVE-2024-12686 Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)	18 Dec 202420:23	–	cvelist
EUVD	EUVD-2024-51049	18 Dec 202420:23	–	euvd

13 Jan 2025 00:00Current

7.8High risk

Vulners AI Score7.8

CVSS 3.16.6 - 7.2

EPSS0.13788

SSVC

os command injection beyondtrust pra beyondtrust remote support administrative privileges remote execution.