Research · Dec 16, 2024 · ZeroDay Catalog
Critical Command Injection Vulnerability in BeyondTrust Products
A critical command injection vulnerability has been identified in BeyondTrust's Privileged Remote Access and Remote Support products, posing significant risk to users.
What changed
A critical vulnerability has been found in BeyondTrust's Privileged Remote Access (PRA) and Remote Support (RS) solutions. This flaw enables unauthenticated attackers to execute arbitrary commands as a site user, potentially compromising the integrity and security of the affected systems.
Who is affected
Organizations utilizing BeyondTrust's Privileged Remote Access and Remote Support products are at risk. This vulnerability can affect any entity relying on these tools for secure remote access and support functionalities.
- BeyondTrust Privileged Remote Access (PRA) users
- BeyondTrust Remote Support (RS) users
- Organizations with remote support operations
- IT departments managing privileged access solutions
What to do
It is crucial for affected organizations to assess their exposure to this vulnerability and implement necessary mitigations. Users should monitor for updates from BeyondTrust regarding patches or workarounds.
- Review and update BeyondTrust products to the latest versions as soon as patches are released.
- Limit access to systems using PRA and RS to trusted users only.
- Implement network segmentation to reduce the potential impact of exploitation.
- Stay informed through BeyondTrust's security advisories and updates.