CVE-2024-12686 - Vulnerability Details - OpenCVE

ReportizFlow

A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.

No CVSS v4.0

Attack Vector Network

Attack Complexity High

Privileges Required High

Scope Unchanged

Confidentiality Impact High

Integrity Impact High

Availability Impact High

User Interaction None

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Exploitation none

Automatable no

Technical Impact total

No data.

No data.

No data.

References

Link	Providers
https://nvd.nist.gov/vuln/detail/CVE-2024-12686
https://www.beyondtrust.com/trust-center/security-advisories/bt24-11

History

Wed, 18 Dec 2024 22:15:00 +0000

Type	Values Removed	Values Added
Metrics		ssvc `{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}`

Wed, 18 Dec 2024 20:30:00 +0000

Type	Values Removed	Values Added
Description		A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
Title		Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
Weaknesses		CWE-78
References		https://nvd.nist.gov/vuln/detail/CVE-2024-12686 https://www.beyondtrust.com/trust-center/security-advisories/bt24-11
Metrics		cvssV3_1 `{'score': 6.6, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'}`

MITRE

Status: PUBLISHED

Assigner: BT

Published: 2024-12-18T20:23:57.909Z

Updated: 2024-12-18T21:15:14.559Z

Reserved: 2024-12-16T18:58:57.921Z

Link: CVE-2024-12686

Vulnrichment

Updated: 2024-12-18T21:15:04.572Z

NVD

Status : Received

Published: 2024-12-18T21:15:08.020

Modified: 2024-12-18T21:15:08.020

Link: CVE-2024-12686

Redhat

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-12686", "assignerOrgId": "13061848-ea10-403d-bd75-c83a022c2891", "state": "PUBLISHED", "assignerShortName": "BT", "dateReserved": "2024-12-16T18:58:57.921Z", "datePublished": "2024-12-18T20:23:57.909Z", "dateUpdated": "2024-12-18T21:15:14.559Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unaffected", "product": "Remote Support(RS) & Privileged Remote Access(PRA)", "vendor": "BeyondTrust", "versions": [{"lessThanOrEqual": "24.3.1", "status": "affected", "version": "0", "versionType": "custom"}]}], "datePublic": "2024-12-18T19:41:00.000Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.</span><span style=\"background-color: rgb(255, 255, 255);\"> </span><br>"}], "value": "A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user."}], "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 6.6, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "HIGH", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "13061848-ea10-403d-bd75-c83a022c2891", "shortName": "BT", "dateUpdated": "2024-12-18T20:23:57.909Z"}, "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12686"}, {"url": "https://www.beyondtrust.com/trust-center/security-advisories/bt24-11"}], "source": {"discovery": "UNKNOWN"}, "title": "Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-12-18T21:14:58.691057Z", "id": "CVE-2024-12686", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-18T21:15:14.559Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-12686", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-12-18T21:14:58.691057Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-12-18T21:15:04.572Z"}}], "cna": {"title": "Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)", "source": {"discovery": "UNKNOWN"}, "impacts": [{"capecId": "CAPEC-88", "descriptions": [{"lang": "en", "value": "CAPEC-88 OS Command Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.6, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "BeyondTrust", "product": "Remote Support(RS) & Privileged Remote Access(PRA)", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "24.3.1"}], "defaultStatus": "unaffected"}], "datePublic": "2024-12-18T19:41:00.000Z", "references": [{"url": "https://nvd.nist.gov/vuln/detail/CVE-2024-12686"}, {"url": "https://www.beyondtrust.com/trust-center/security-advisories/bt24-11"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.", "supportingMedia": [{"type": "text/html", "value": "<span style=\"background-color: rgb(255, 255, 255);\">A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.</span><span style=\"background-color: rgb(255, 255, 255);\"> </span><br>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-78", "description": "CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')"}]}], "providerMetadata": {"orgId": "13061848-ea10-403d-bd75-c83a022c2891", "shortName": "BT", "dateUpdated": "2024-12-18T20:23:57.909Z"}}}, "cveMetadata": {"cveId": "CVE-2024-12686", "state": "PUBLISHED", "dateUpdated": "2024-12-18T21:15:14.559Z", "dateReserved": "2024-12-16T18:58:57.921Z", "assignerOrgId": "13061848-ea10-403d-bd75-c83a022c2891", "datePublished": "2024-12-18T20:23:57.909Z", "assignerShortName": "BT"}, "dataVersion": "5.1"}