BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
CVE-2024-12686
Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
ما هي
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
CISA: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.
ما العمل
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
الموعد النهائي للوكالات الفدرالية الأمريكية: 3 فبراير 2025
ثغرات مُستغلّة أخرى من BeyondTrust
| أُضيفت | الثغرة | المنتج | الخطورة | احتمال الهجوم |
|---|---|---|---|---|
| 19/12/2024 | Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability | Privileged Remote Access (PRA) and Remote Support (RS) | حرجة 9.8 | 87% |
| 16/10/2026 | Authentication Bypass by Spoofing | Remote Support | حرجة 9.3 | 19% |
| 13/02/2026 | OS Command Injection | Remote Support (RS) and Privileged Remote Access (PRA) | حرجة 9.9 | 93% |
المصادر: Known Exploited Vulnerabilities (CISA، ملكية عامة)، وCVE records (cve.org)، وEPSS (FIRST). احتمال الهجوم هو تقدير EPSS لاحتمال أن يحاول أحد استغلال الثغرة خلال الأيام الـ30 القادمة.