9.8Crítica
KEV
CVE-2024-12356Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)
Explotación conocida — BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability
CISA confirmó el 19.12.2024 que esta vulnerabilidad se usa en ataques reales. Plazo para las agencias federales de EE. UU.: 27.12.2024.
Acción requerida: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 ; https://nvd.nist.gov/vuln/detail/CVE-2024-12356
Descripción
A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.
Debilidad (CWE):
CWE-77
Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.
Productos y versiones afectados
| Fabricante | Producto | Versiones | |
|---|---|---|---|
| BeyondTrust | Privileged Remote Access | ≤ 24.3.1 | |
| BeyondTrust | Remote Support | ≤ 24.3.1 |
Referencias y parches
- https://www.cve.org/CVERecord?id=CVE-2024-12356 Third Party AdvisoryUS Government Resource
- https://nvd.nist.gov/vuln/detail/CVE-2024-12356 Third Party AdvisoryUS Government Resource
- https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 Vendor Advisory
- https://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis ExploitThird Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-12356 US Government Resource
Coincidencias CPE (NVD) (2)
cpe:2.3:a:beyondtrust:privileged_remote_access:*:*:*:*:*:*:*:*≤ 24.3.1cpe:2.3:a:beyondtrust:remote_support:*:*:*:*:*:*:*:*≤ 24.3.1