Actively exploited in the wild

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

BeyondTrust - Privileged Remote Access (PRA) and Remote Support (RS) · Listed in the CISA KEV since 2024-12-19. This indicates confirmed attacks in production environments.

Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CVE-2024-12356

CriticalCVSS 9.8KEV

Published: 17/12/2024(UTC)Updated: 17/06/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

A critical vulnerability in Privileged Remote Access (PRA) and Remote Support (RS) products allows an unauthenticated attacker to inject commands that are run as a site user.

Risk Assessment

An attacker can execute commands as a site user, potentially leading to unauthorized access and privilege escalation.

Recommendation

Apply the vendor-provided patches for PRA and RS products immediately.

Other vulnerabilities in Privileged Remote Access (PRA) and Remote Support (RS)

CVE-2024-12686MediumActively exploited
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.

Original NVD description (English source)

A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS