Firetruck

CVE-2024-12356

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
Privileged Remote AccessBeyondTrust / Privileged Remote Access>= 0, <= 24.3.1affected
Remote SupportBeyondTrust / Remote Support>= 0, <= 24.3.1affected