CVE-2024-12686 — Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

CVE-2024-12686

Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA) PUBLISHED

Description (CNA)

A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.

Affected (CNA)

Vendor / product	Versions
BeyondTrust / Remote Support(RS) & Privileged Remote Access(PRA)	affected 0 through 24.3.1

CWE

CWE-78

References

https://nvd.nist.gov/vuln/detail/CVE-2024-12686
https://www.beyondtrust.com/trust-center/security-advisories/bt24-11

ADP enrichment

CISA-ADP

No English description supplied.

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-12686