CVE-2024-12356
Act now ● On CISA KEV — actively exploited
Actively exploited — on the CISA KEV list.
CVSS base
—
EPSS — probability of exploitation (30 days)
88.0%
99.8th percentile
CISA KEV
Listed
Added 2024-12-19 · patch by 2024-12-27
Weakness / dates
—
Published — · modified —
Description
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) contain a command injection vulnerability, which can allow an unauthenticated attacker to inject commands that are run as a site user.