Detections
Analytics

CVE-2024-12356

critical

Description

A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

References

https://www.cve.org/CVERecord?id=CVE-2024-12356

https://nvd.nist.gov/vuln/detail/CVE-2024-12356

https://www.theregister.com/2025/02/14/postgresql_bug_treasury/

https://www.bleepingcomputer.com/news/security/postgresql-flaw-exploited-as-zero-day-in-beyondtrust-breach/

https://thehackernews.com/2025/02/postgresql-vulnerability-exploited.html

https://www.securityweek.com/rapid7-flags-new-postgresql-zero-day-connected-to-beyondtrust-exploitation/

https://www.securityweek.com/cisa-warns-of-second-beyondtrust-vulnerability-exploited-in-attacks/

https://www.bleepingcomputer.com/news/security/cisa-orders-agencies-to-patch-beyondtrust-bug-exploited-in-attacks/

https://www.darkreading.com/threat-intelligence/thousands-of-buggy-beyondtrust-systems-still-exposed

https://www.bleepingcomputer.com/news/security/beyondtrust-says-hackers-breached-remote-support-saas-instances/

https://www.securityweek.com/beyondtrust-patches-critical-vulnerability-discovered-during-security-incident-probe/

https://www.helpnetsecurity.com/2024/12/18/beyondtrust-fixes-critical-vulnerability-in-remote-access-support-solutions-cve-2024-12356/

https://thehackernews.com/2024/12/beyondtrust-issues-urgent-patch-for.html

https://www.beyondtrust.com/trust-center/security-advisories/bt24-10

Details

Source: Mitre, NVD

Published: 2024-12-17

Updated: 2025-03-10

Named Vulnerability: BeyondTrust Remote Support SaaS Zero-DayKnown Exploited Vulnerability (KEV)

Risk Information

CVSS v2

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Severity: Critical

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.935

Vulnerability Watch

Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.

Vulnerability Being Monitored