{"id":1505,"date":"2025-01-15T16:51:00","date_gmt":"2025-01-15T16:51:00","guid":{"rendered":"https:\/\/fusionmindlabs.com\/blogs\/2025\/01\/15\/second-vulnerability-added-to-kev-catalog\/"},"modified":"2025-01-15T16:51:00","modified_gmt":"2025-01-15T16:51:00","slug":"second-vulnerability-added-to-kev-catalog","status":"publish","type":"post","link":"https:\/\/fusionmindlabs.com\/blogs\/second-vulnerability-added-to-kev-catalog\/","title":{"rendered":"Second Vulnerability Added to KEV Catalog"},"content":{"rendered":"\n<\/p>\n<p><strong>Cybersecurity Alert: BeyondTrust Remote Support SaaS Service Vulnerability<\/strong><\/p>\n<p><strong>News Brief<\/strong><\/p>\n<p>The Cybersecurity and Infrastructure Security Agency (CISA) is urging federal agencies to patch a command injection flaw tracked as <a class=\"ContentText-BodyTextChunk ContentText-BodyTextChunk_link\" target=\"_blank\" href=\"https:\/\/www.cve.org\/CVERecord?id=CVE-2024-12686\" rel=\"nofollow noopener\">CVE-2024-12686<\/a>, also known as BT24-11, and has added it to the Known Exploited Vulnerabilities (KEV) Catalog.<\/p>\n<p><strong>Background of the Vulnerability<\/strong><\/p>\n<p>The medium-severity security bug was discovered as part of BeyondTrust&#8217;s Remote Support SaaS Service security investigation, launched after a major data breach at the US Treasury Department. The breach was reportedly caused by the Chinese hacking group, Silk Typhoon, which gained credentials to Treasury workstations through a third-party vendor and then stole data. BeyondTrust identified BT24-11 within its self-hosted and cloud Remote Support and Privileged Remote Access products, just two days after reporting BT24-10.<\/p>\n<p><strong>Update on the Vulnerability<\/strong><\/p>\n<p>On January 6, BeyondTrust reported that its forensic investigation is nearly complete and that all software-as-a-service instances of BeyondTrust Remote Support have been fully patched with no new identified victims. The company stated that &quot;all cloud instances have been patched for this vulnerability&quot; and that a patch for self-hosted versions has also been released.<\/p>\n<p><strong>CISA&#8217;s Warning<\/strong><\/p>\n<p>CISA warned that the vulnerability &quot;can be exploited by an attacker with existing administrative privileges to inject commands and run as a site user.&quot; This would allow a remote attacker to execute underlying operating system commands.<\/p>\n\n<br \/><a href=\"https:\/\/www.darkreading.com\/vulnerabilities-threats\/cisa-warns-of-second-vuln-found-in-beyondtrust-breach-investigation\" rel=\"nofollow noopener\" target=\"_blank\">Source Link<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Cybersecurity Alert: BeyondTrust Remote Support SaaS Service Vulnerability News Brief The Cybersecurity and Infrastructure Security Agency (CISA) is urging federal agencies to patch a command injection flaw tracked as CVE-2024-12686,&#8230;<\/p>\n","protected":false},"author":19,"featured_media":1506,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[22],"tags":[],"class_list":["post-1505","post","type-post","status-publish","format-standard","has-post-thumbnail","category-cybersecurity"],"jetpack_featured_media_url":"https:\/\/fusionmindlabs.com\/blogs\/wp-content\/uploads\/sites\/9\/2025\/01\/vulnerability-ktdesign-AdobeStock.jpeg","_links":{"self":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1505","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/users\/19"}],"replies":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/comments?post=1505"}],"version-history":[{"count":0,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/posts\/1505\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media\/1506"}],"wp:attachment":[{"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/media?parent=1505"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/categories?post=1505"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/fusionmindlabs.com\/blogs\/wp-json\/wp\/v2\/tags?post=1505"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}