vulnerability
BeyondTrust: CVE-2023-4310: Command injection vulnerability which can be exploited through a malicious HTTP request
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 10 | (AV:N/AC:L/Au:N/C:C/I:C/A:C) | Jul 28, 2023 | Jul 21, 2025 | Apr 8, 2026 |
Severity
10
CVSS
(AV:N/AC:L/Au:N/C:C/I:C/A:C)
Published
Jul 28, 2023
Added
Jul 21, 2025
Modified
Apr 8, 2026
Description
A Critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) which can allow an unauthenticated attacker to inject commands that run as the site user BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request.
Solutions
beyondtrust-remote-support-upgrade-latestbeyondtrust-privileged-remote-access-upgrade-latest
Rapid7 Labs
2026 Global Threat Landscape Report
The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.