The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the origin of the messages it received. Under the right conditions, this could allow an attacker to perform file operations on the appliance.
CVSS
9.8
EPSS
0%
KEV
Yes
Exploitation
reported
CVE Published
16d ago · NVD
Added to TCL Advisory
15d ago · TCL Advisory
Added to CISA KEV
15d ago · CISA
Exploitation Status Changed
15d ago · TCL Advisory
NVD · Updated 15d ago
CISA KEV · Updated 16d ago