CVE-2024-12356

🗓️ 17 Dec 2024 04:29:07Reported by BTType

cve🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 636 Views🌐 WEB

Critical command injection vulnerability in Remote Support and Privileged Remote Access products.

Reporter	Title	Published	Views	Family All 49
GithubExploit	Exploit for CVE-2026-1731	11 Feb 202609:18	–	githubexploit
GithubExploit	Exploit for CVE-2026-1731	13 Feb 202619:48	–	githubexploit
GithubExploit	Exploit for CVE-2025-1094	18 Jun 202515:18	–	githubexploit
zdt	BeyondTrust Remote Code Execution Exploit	20 Feb 202500:00	–	zdt
attackerkb	CVE-2026-1731	6 Feb 202621:49	–	attackerkb
attackerkb	CVE-2024-12356	17 Dec 202400:00	–	attackerkb
BDU FSTEC	Remote Support Privilege Escalation Command Injection	13 Jan 202500:00	–	bdu_fstec
Tenable Nessus	BeyondTrust Privileged Remote Access (PRA) <= 24.3.1 Multiple Vulnerabilities	2 Jan 202500:00	–	nessus
Tenable Nessus	BeyondTrust Remote Support (RS) <= 24.3.1 Command Injection (BT24-10)	2 Jan 202500:00	–	nessus
Circl	CVE-2024-12356	17 Dec 202404:32	–	circl

NVD

Node

beyondtrust privileged_remote_accessRange≤24.3.1

beyondtrust remote_supportRange≤24.3.1

[
  {
    "defaultStatus": "unaffected",
    "product": "Remote Support",
    "vendor": "BeyondTrust",
    "versions": [
      {
        "lessThanOrEqual": "24.3.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Privileged Remote Access",
    "vendor": "BeyondTrust",
    "versions": [
      {
        "lessThanOrEqual": "24.3.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-12356
beyondtrust	www.beyondtrust.com/trust-center/security-advisories/bt24-10
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
attackerkb	www.attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis

Parameter	Position	Path	Description	CWE
gskey	path	/nw	Unauthenticated remote code execution against BeyondTrust PRA/RS via argument injection in gskey payload delivered over WebSocket to /nw.	CWE-77