VULNERABILITY INTELLIGENCE
CVE-2023-4310
CVSS score9.8 CRITICAL
EPSS probability1.85%
CISA KEVNot currently listed
Published2023-09-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request. Successful exploitation of this vulnerability can allow an unauthenticated remote attacker to execute underlying operating system commands within the context of the site user. This issue is fixed in version 23.2.3.
Weakness classification
- 9119a7d8-5eab-497f-8521-727c672e3725: CWE-77
- nvd@nist.gov: CWE-77