BeyondTrust: command injection (CVE-2024-12356) #shorts

CVE

This CVE highlights a critical vulnerability involving command injection within BeyondTrust's Remote Support and Privileged Remote Access products. Identified five months ago, it targets systems up to version 24.3.1 and has notably impacted organizations like the Treasury Department. The vulnerability allows unauthenticated attackers to execute commands as though they are legitimate site users, posing a significant security risk. Although the specifics regarding the tools used in these attacks are not detailed, all users of these affected versions should be aware of the potential for unauthorized command execution, which can lead to severe consequences if exploited.

This chain involves the following actors

This following systems are involved

Attack entry point

Remediation actions

Exploitation actions

• https://www.cve.org/CVERecord?id=CVE-2024-12356
• https://nvd.nist.gov/vuln/detail/CVE-2024-12356
• https://www.beyondtrust.com/trust-center/security-advisories/bt24-10