CVE-2023-4310 Command injection in Privileged Remote Access (PRA)

Critical 9.8 Published 5 Sep 2023 Updated 1 Oct 2024

Unauthenticated remote attackers can execute OS commands via malicious HTTP requests in BeyondTrust PRA and RS.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2023-4310?

CVE-2023-4310 is a critical command injection vulnerability in BeyondTrust Privileged Remote Access (PRA), published on 5 Sep 2023. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2 contain a command injection vulnerability which can be exploited through a malicious HTTP request. Successful exploitation of this vulnerability can allow an unauthenticated remote attacker to execute underlying operating system commands within the context of the site user. This issue is fixed in version 23.2.3.

Weakness: CWE-77

Which versions are affected by CVE-2023-4310?

It affects 2 products.

Products include Beyondtrust Privileged Remote Access, Beyondtrust Remote Support.

How do I fix CVE-2023-4310?

No fix has been published for CVE-2023-4310 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2023-4310 being exploited?

There is no known exploitation of CVE-2023-4310 in the wild and no public exploit code.

Sources

Also known as GHSA-7q7j-jq8x-xcjh.