CVE-2024-12356

🗓️ 17 Dec 2024 04:29:07Reported by BTType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 455 Views🌐 WEB

Critical command injection vulnerability in Remote Support and Privileged Remote Access products.

Reporter	Title	Published	Views	Family All 104
GithubExploit	Exploit for CVE-2026-1731	11 Feb 202609:18	–	githubexploit
GithubExploit	Exploit for CVE-2026-1731	13 Feb 202619:48	–	githubexploit
GithubExploit	Exploit for CVE-2025-1094	18 Jun 202515:18	–	githubexploit
0day.today	BeyondTrust Remote Code Execution Exploit	20 Feb 202500:00	–	zdt
ATTACKERKB	CVE-2026-1731	6 Feb 202621:49	–	attackerkb
ATTACKERKB	CVE-2024-12356	17 Dec 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Remote Support remote support tool and the Privileged Remote Access remote access tool lies in the lack of measures to neutralize special elements, allowing attackers to enhance their privileges and execute arbitrary commands.	13 Jan 202500:00	–	bdu_fstec
BDU FSTEC	The vulnerabilities of the functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() in the libpq library of the PostgreSQL database management system allow a hacker to execute arbitrary code.	17 Feb 202500:00	–	bdu_fstec
Tenable Nessus	BeyondTrust Privileged Remote Access (PRA) <= 24.3.1 Multiple Vulnerabilities	2 Jan 202500:00	–	nessus
Tenable Nessus	BeyondTrust Remote Support (RS) <= 24.3.1 Multiple Vulnerabilities	2 Jan 202500:00	–	nessus

NVD

Node

beyondtrust privileged_remote_accessRange≤24.3.1

beyondtrust remote_supportRange≤24.3.1

[
  {
    "defaultStatus": "unaffected",
    "product": "Remote Support",
    "vendor": "BeyondTrust",
    "versions": [
      {
        "lessThanOrEqual": "24.3.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "product": "Privileged Remote Access",
    "vendor": "BeyondTrust",
    "versions": [
      {
        "lessThanOrEqual": "24.3.1",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-12356
cve	www.cve.org/CVERecord
beyondtrust	www.beyondtrust.com/trust-center/security-advisories/bt24-10
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
attackerkb	www.attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis