MEDIUM Actively exploited CWE-78
CVE-2024-12686
Command Injection vulnerability in Remote Support(RS) & Privilege Remote Access (PRA)
BeyondTrust·Privileged Remote Access (PRA) and Remote Support (RS)
6.6/ 10
CVSS 3.1
Medium severity
33%
EPSS exploit odds
Chance of exploitation in the next 30 days
Higher than 98% of all CVEs
Listed
CISA KEV catalog
- Added
- Jan 13, 2025
- Fix due
- Feb 3, 2025
- Ransomware
- Not known
Timeline
- Published
- Dec 18, 2024
- Updated
- Oct 21, 2025
- First covered
- Jul 7, 2026
- Latest story
- 4 months ago
Summary
A vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an attacker with existing administrative privileges to inject commands and run as a site user.
CWE-78Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Attack profile
Attack vectorNetwork
ComplexityHigh
PrivilegesHigh
User interactionNone
ScopeUnchanged
ConfidentialityHigh
IntegrityHigh
AvailabilityHigh
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:HCISA required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Affected products
- BeyondTrust Remote Support(RS) & Privileged Remote Access(PRA)up to 24.3.1