BeyondTrust · Privileged Remote Access (PRA) and Remote Support (RS)
CVE-2024-12686
Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
무엇인가
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
CISA: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.
할 일
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
미국 연방 기관 조치 기한: 2025년 2월 3일
BeyondTrust의 다른 악용된 결함
| 추가됨 | 취약점 | 제품 | 심각도 | 공격 가능성 |
|---|---|---|---|---|
| 2024. 12. 19. | Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability | Privileged Remote Access (PRA) and Remote Support (RS) | 치명적 9.8 | 87% |
| 2026. 10. 16. | Authentication Bypass by Spoofing | Remote Support | 치명적 9.3 | 19% |
| 2026. 2. 13. | OS Command Injection | Remote Support (RS) and Privileged Remote Access (PRA) | 치명적 9.9 | 93% |
출처: Known Exploited Vulnerabilities(CISA, 퍼블릭 도메인), CVE records(cve.org), EPSS(FIRST). 공격 가능성은 누군가 향후 30일 안에 이 결함을 악용하려 할 확률에 대한 EPSS 추정치입니다.