Unrated severityCISA KEVNVD Advisory· Published Dec 17, 2024· Updated Oct 21, 2025

Command Injection Vulnerability in Remote Support(RS) & Privileged Remote Access (PRA)

CVE-2024-12356

Description

A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Beyondtrust/Remote Support & Privileged Remote Accesscpe-rescue
Range: 0
Etrust/Remote Supportcpe-rescue
Range: 0

Patches

Vulnerability mechanics

References

nvd.nist.gov/vuln/detail/CVE-2024-12356mitre
www.beyondtrust.com/trust-center/security-advisories/bt24-10mitre
www.cve.org/CVERecordmitre

News mentions

Exploits and vulnerabilities in Q1 2026
Securelist · May 7, 2026

cvss	0.000
epss	0.070
exploit	0.030
kev	0.120
patch	0.000
ransomware	0.000