Exploited Vulnerabilities DailyCVE-2024-12686: BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)
EPSS13.7%No. 1219 of 1739 in KEV
CVE year2024~1 yrs before listing
Same vendor in KEV3
Same product2
| Field | Value |
|---|---|
| Vendor | BeyondTrust |
| Product | Privileged Remote Access (PRA) and Remote Support (RS) |
| Name | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability |
| Added to KEV | 2025-01-13 |
| US federal due date | 2025-02-03 |
| Ransomware use | Unknown |
| CWE | CWE-78 |
CISA description
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain an OS command injection vulnerability that can be exploited by an attacker with existing administrative privileges to upload a malicious file. Successful exploitation of this vulnerability can allow a remote attacker to execute underlying operating system commands within the context of the site user.
Other entries for this product
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2024-12356 | BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) | 2024-12-19 | 87.2% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.
About this page
A BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) vulnerability added to CISA's Known Exploited Vulnerabilities catalog on 2025-01-13.