vulnerability-ktdesign-AdobeStock

CISA: Second BeyondTrust Vulnerability Added to KEV Catalog

Share:

BeyondTrust has patched all cloud instances of the vulnerability and has released patches for self-hosted versions.

NEWS BRIEF

The Cybersecurity and Infrastructure Security Agency (CISA) is urging federal agencies to patch a command injection flaw tracked as CVE-2024-12686, otherwise known as BT24-11, and has added it to the Known Exploited Vulnerabilities (KEV) Catalog.

The medium-severity security bug was found as a part of BeyondTrust’s Remote Support SaaS Service security investigation, which was launched after a major data breach at the US Treasury DepartmentSilk Typhoon, a Chinese hacking group, was reportedly responsible for the December 2024 cyberattack, in which threat actors were able to gain credentials to Treasury workstations through the third-party vendor and then steal data. On Dec. 18, BeyondTrust reported identifying BT24-11 within its self-hosted and cloud Remote Support and Privileged Remote Access products, after reporting BT24-10 just two days prior.

On Jan. 6, in its latest update, BeyondTrust reported that its forensic investigation is nearly complete and that all software-as-a-service instances of BeyondTrust Remote Support have been fully patched with no new identified victims.

“All cloud instances have been patched for this vulnerability,” BeyondTrust stated in the update. “We have also released a patch for self-hosted versions.”

CISA stated that the vulnerability “can be exploited by an attacker with existing administrative privileges to inject commands and run as a site user.” That would allow a remote attacker to execute underlying operating system commands.

Source

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
10:57 am, Feb 6, 2025
weather icon 6°C
L: 4° | H: 6°
clear sky
Humidity: 88 %
Pressure: 1043 mb
Wind: 5 mph ENE
Wind Gust: 0 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 0%
Rain Chance: 0%
Visibility: 10 km
Sunrise: 7:30 am
Sunset: 4:58 pm
DailyHourly
Daily ForecastHourly Forecast
Today 9:00 pm
weather icon
4° | 6°°C 0 mm 0% 12 mph 87 % 1042 mb 0 mm/h
Tomorrow 9:00 pm
weather icon
3° | 4°°C 1 mm 100% 13 mph 96 % 1036 mb 0 mm/h
Sat Feb 08 9:00 pm
weather icon
4° | 6°°C 1 mm 100% 13 mph 96 % 1028 mb 0 mm/h
Sun Feb 09 9:00 pm
weather icon
4° | 6°°C 0 mm 0% 14 mph 94 % 1038 mb 0 mm/h
Mon Feb 10 9:00 pm
weather icon
2° | 5°°C 1 mm 100% 13 mph 96 % 1036 mb 0.3 mm/h
Today 12:00 pm
weather icon
6° | 7°°C 0 mm 0% 9 mph 87 % 1042 mb 0 mm/h
Today 3:00 pm
weather icon
7° | 8°°C 0 mm 0% 10 mph 77 % 1041 mb 0 mm/h
Today 6:00 pm
weather icon
6° | 6°°C 0 mm 0% 11 mph 79 % 1041 mb 0 mm/h
Today 9:00 pm
weather icon
4° | 4°°C 0 mm 0% 12 mph 83 % 1038 mb 0 mm/h
Tomorrow 12:00 am
weather icon
4° | 4°°C 0 mm 0% 12 mph 81 % 1036 mb 0 mm/h
Tomorrow 3:00 am
weather icon
3° | 3°°C 0 mm 0% 11 mph 81 % 1033 mb 0 mm/h
Tomorrow 6:00 am
weather icon
4° | 4°°C 0 mm 0% 12 mph 75 % 1030 mb 0 mm/h
Tomorrow 9:00 am
weather icon
4° | 4°°C 0 mm 0% 13 mph 67 % 1028 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€95,491.76
1.03%
Ethereum(ETH)
€2,729.84
1.64%
Tether(USDT)
€0.97
0.00%
XRP(XRP)
€2.37
-3.13%
Solana(SOL)
€194.73
-1.62%
USDC(USDC)
€0.97
-0.01%
Dogecoin(DOGE)
€0.254209
-0.92%
Shiba Inu(SHIB)
€0.000015
-1.37%
Pepe(PEPE)
€0.000010
-2.12%
Scroll to Top