What’s Vulnerable › Vulnerabilities

CVE-2023-4310

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-09-05 · updated 2026-06-17
• Weakness: CWE-77

Description

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request. Successful exploitation of this vulnerability can allow an unauthenticated remote attacker to execute underlying operating system commands within the context of the site user. This issue is fixed in version 23.2.3.

Affected products

• BeyondTrust Privileged Remote Access: 23.2.1, 23.2.2
• BeyondTrust Remote Support: 23.2.1, 23.2.2

References

• https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0020207
• https://www.beyondtrust.com/blog/entry/security-update-for-remote-support-and-privileged-remote-access
• https://beyondtrustcorp.service-now.com/csm?id=kb_article_view&sysparm_article=KB0020207
• https://www.beyondtrust.com/blog/entry/security-update-for-remote-support-and-privileged-remote-access

Get alerted when CVE-2023-4310 or the next vulnerability affects your stack