Skip to content
OpenAdvisories
Medium · 6.6 Known exploited CVE-2024-12686 EUVD-2024-51049GHSA-xqg3-vx4p-jmwm

Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)

Published Dec 18, 2024 · Updated Oct 21, 2025 · Assigned by BT

Description

A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.

Affected products

VendorProductAffectedFixed
BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA) ≤ 24.3.1 —

Advisories 1

References