BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2024-12356 · Third Party Advisory
• beyondtrust.com/trust-center/security-advisories/bt24-10 · Vendor Advisory
• cve.org/CVERecord · Third Party Advisory
• attackerkb.com/topics/G5s8ZWAbYH/cve-2024-12356/rapid7-analysis · Exploit
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2024-12356

privileged remote access のその他の脆弱性

• CVE-2026-40141緊急 9.9A high-severity vulnerability exists in a web application component of BeyondTrust Remote Support and Privileged Remote Access related to th…
• CVE-2026-40140高 7.5BeyondTrust Remote Support and Privileged Remote Access contain a high-severity pre-authentication vulnerability in the network communicatio…
• CVE-2026-40139緊急 9.8A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support. Improper processing of aut…
• CVE-2026-40138高 8.1A critical pre-authentication vulnerability exists in the authentication subsystem of BeyondTrust Remote Support and Privileged Remote Acces…
• CVE-2026-1731緊急 9.8悪用確認済み（CISA KEV）BeyondTrust Remote Support (RS) and certain older versions of Privileged Remote Access (PRA) contain a critical pre-authentication remote co…