CVE-2024-12356

Published Dec 17, 2024

Last updated 4 months ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2024-12356 is a command injection vulnerability found in BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) products prior to version 24.3.1. Exploitation allows unauthenticated attackers to execute commands on the underlying operating system with the privileges of the site user. This vulnerability has a CVSS score of 9.8 and is known to be actively exploited. It affects both on-premises and SaaS instances of the affected BeyondTrust products. While patches are available, the responsibility for applying them falls on the customers using these products.

Description: A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.
Source: 13061848-ea10-403d-bd75-c83a022c2891
NVD status: Analyzed
Products: privileged_remote_access, remote_support

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.8
Impact score: 5.9
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
Exploit added on: Dec 19, 2024
Exploit action due: Dec 27, 2024
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

13061848-ea10-403d-bd75-c83a022c2891: CWE-77
nvd@nist.gov: CWE-77

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 12

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "D402E4B5-D3EA-4AD1-8954-92FB6A873906",
            "versionEndIncluding": "24.3.1"
          },
          {
            "criteria": "cpe:2.3:a:beyondtrust:remote_support:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AD0D0CD2-E8CE-40B6-B8F0-2FB1A98DA3F8",
            "versionEndIncluding": "24.3.1"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References

Sources include official advisories and independent security research.