Exploited Vulnerabilities DailyCVE-2024-12356: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)
EPSS87.2%No. 518 of 1739 in KEV
CVE year2024listed the same year
Same vendor in KEV3
Same product2
| Field | Value |
|---|---|
| Vendor | BeyondTrust |
| Product | Privileged Remote Access (PRA) and Remote Support (RS) |
| Name | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability |
| Added to KEV | 2024-12-19 |
| US federal due date | 2024-12-27 |
| Ransomware use | Unknown |
| CWE | CWE-77 |
CISA description
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-12686 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) | 2025-01-13 | 13.7% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2024-12-19.