CVE-2024-12686mediumunder attackCWE-78

CVE-2024-12686: medium-severity vulnerability in BeyondTrust Remote Support(RS) & Privileged…

Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

Published · Updated

Follow this CVE+ Monitor Remote Support+ Monitor Privileged Remote Access

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

55Vexday Risk Score

Prioritize patching. It under exploitation confirmed by CISA.

ssvc Attendcvss 6.6epss 33%
from disclosure to weapon
Published on NVDDec 18
CISA KEV+26d
Action required by CISAfederal deadline: 2025-02-03

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

An admin user with existing access to Remote Support or Privilege Remote Access software can inject malicious commands that execute with the privileges of a regular site user. This allows them to run unauthorized code on the system.

Technical detail

Command injection vulnerability (CWE-78) in PRA and RS products requires pre-existing administrative credentials to inject arbitrary OS commands through input parameters, resulting in code execution with site user privileges. The attack vector is local/network-based depending on access method, with moderate impact on system integrity and confidentiality.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected products
BeyondTrust · Remote Support(RS) & Privileged Remote Access(PRA)
Related CVEs — BeyondTrust Remote Support(RS) & Privileged…

In the same product, most dangerous first.

CVE-2026-1731CRITICALRemote code execution vulnerability in BeyondTrust Remote Support (RS) and Privileged Remote Access (PRA)EPSS 93.9%KEVCVE-2025-5309HIGHRemote Support & Privileged Remote Access server side template injectionEPSS 0.9%