A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.

The version of BeyondTrust Remote Support (RS) running on the remote host is prior or equal to 24.3.1. It is, therefore, potentially affected by a command injection vulnerability.

  - All BeyondTrust Remote Support (RS) versions contain a command injection vulnerability that can be   exploited by a user with existing administrative privileges to upload a malicious file. Successful   exploitation of this vulnerability can allow a remote attacker to execute underlying operating system   commands within the context of the site user. This issue is fixed through a patch available for all   supported releases of RS & PRA 22.1.x and higher. (CVE-2024-12686)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of BeyondTrust Privileged Remote Access (PRA) running on the remote host is prior or equal to 24.3.1. It is, therefore, potentially affected by multiple vulnerabilities.

  - All BeyondTrust Privileged Remote Access (PRA) versions contain a command injection vulnerability which can be   exploited through a malicious client request. Successful exploitation of this vulnerability can allow an   unauthenticated remote attacker to execute underlying operating system commands within the context of the   site user. This issue is fixed through a patch available for all supported releases of RS & PRA 22.1.x and   higher. (CVE-2024-12356)

  - All BeyondTrust Privileged Remote Access (PRA) versions contain a command injection vulnerability that can be   exploited by a user with existing administrative privileges to upload a malicious file. Successful   exploitation of this vulnerability can allow a remote attacker to execute underlying operating system   commands within the context of the site user. This issue is fixed through a patch available for all   supported releases of RS & PRA 22.1.x and higher. (CVE-2024-12686)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
325647	BeyondTrust Remote Support (RS) <= 24.3.1 Command Injection (BT24-11)	Nessus	CGI abuses	Combined	high
213465	BeyondTrust Privileged Remote Access (PRA) <= 24.3.1 Multiple Vulnerabilities	Nessus	CGI abuses	Remote	critical

Detections

Analytics

CVE-2024-12686

high

Tenable Plugins

high

critical