ИнструментыУязвимости БДУБлоклистыРасширениеУтилитыБлогAPIМониторинг
Главная → Уязвимости → CVE-2024-12356
9.8критическая

CVE-2024-12356

→ есть в БДУ: BDU:2025-00196 (на русском)
Описание (на английском; русское — в БДУ выше)

A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

Затрагиваемое ПО
Beyondtrust Privileged remote accessBeyondtrust Remote support
CVSS
Балл9.8 — критическая
ВекторCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Источники
https://nvd.nist.gov/vuln/detail/CVE-2024-12356https://www.beyondtrust.com/trust-center/security-advisories/bt24-10https://www.cve.org/CVERecord?id=CVE-2024-12356https://attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysishttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-12356