PT-2023-28697 · Beyondtrust · Beyondtrust Privileged Remote Access+1

Published 2023-09-05 · Updated 2023-09-11 · CVE-2023-4310

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 through 23.2.2

Description The issue is a command injection vulnerability that can be exploited through a malicious HTTP request, allowing an unauthenticated remote attacker to execute underlying operating system commands within the context of the site user.

Recommendations For versions 23.2.1 and 23.2.2, update to version 23.2.3 to resolve the issue. As a temporary workaround, consider restricting access to the vulnerable HTTP endpoint until a patch is available. Avoid using the vulnerable functionality in the affected versions until the issue is resolved.

Fix

Command Injection

Weakness Enumeration

CWE-77

Related Identifiers

CVE-2023-4310

Affected Products

Beyondtrust Privileged Remote Access

Beyondtrust Remote Support

References · 7

• https://osv.dev/vulnerability/CVE-2023-4310 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-4310 · Security Note
• https://t.me/cibsecurity/69907 · Telegram Post
• https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0020207 · Note
• https://beyondtrust.com/blog/entry/security-update-for-remote-support-and-privileged-remote-access · Note
• https://twitter.com/VulmonFeeds/status/1699192634684624900 · Twitter Post
• https://twitter.com/CVEnew/status/1699157167511592999 · Twitter Post