VDB
CVE-2024-12356
CVE-2024-12356
PUBLISHED
KEV
Es besteht eine Schwachstelle in BeyondTrust Privileged Remote Access und BeyondTrust Remote Support. Dieser Fehler existiert wegen eines Befehlsinjektionsproblems. Ein entfernter, anonymer Angreifer kann diese Schwachstelle ausnutzen, um beliebige zugrundeliegende Betriebssystembefehle im Kontext des Benutzers der Website auszuführen.
EPSS 93.86% · 99.9th percentile
Risk Scores
EPSS Score
93.86%
99.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| BeyondTrust | BeyondTrust Remote Support <=24.3.1 | |
| BeyondTrust | BeyondTrust Privileged Remote Access <=24.3.1 |
Timeline
- Jan 21, 1970 Metasploit Module
- Jan 21, 1970 Nuclei Template
- Jan 21, 1970 Fix Commit
- Dec 17, 2024 EPSS Score
- Dec 17, 2024 CVE Published
- Dec 17, 2024 PoC Published
- Dec 17, 2024 PoC Published
- Dec 17, 2024 PoC Published
- Dec 17, 2024 PoC Published
- Dec 18, 2024 PoC Published
- Dec 18, 2024 PoC Published
- Dec 18, 2024 PoC Published
References
- https://wid.cert-bund.de/.well-known/csaf/white/2024/wid-sec-w-2024-3723.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2024-3723 advisory
- https://www.beyondtrust.com/trust-center/security-advisories/bt24-10 advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog exploit