ZeroDay Findings
Sign inSign up

Findings

CVE-2024-12356

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

Published Dec 16, 2024 · updated Jun 16, 2026 · beyondtrust privileged remote access

A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 16, 2024 · Catalog

    Detected

    A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

  2. Dec 19, 2024 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Dec 27, 2024 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Dec 27, 2024

Affected

  • cpe beyondtrust/privileged remote accessversion unspecified
  • cpe beyondtrust/remote supportversion unspecified
  • vendor BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS)version unspecified

Sources

  • CISA KEVCVE-2024-12356

    BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.

    cisa.gov
  • CVE.orgCVE-2024-12356

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2024-12356

    30-day exploitation probability 87.3%

    first.org
  • Metasploit Modulesexploit_linux/http/beyondtrust_pra_rs_unauth_rce

    Public module reference (excellent). Module source is not copied into this catalog.

    rapid7.com
  • NIST NVDCVE-2024-12356

    A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

    nvd.nist.gov

References