BeyondTrust Security Incident — Command Injection and Escalation Weaknesses (CVE-2024-12356, CVE-2024-12686) - SOCRadar® Cyber Intelligence Inc.
Tags
| attack-pattern: | Exploits - T1587.004 Exploits - T1588.005 Ip Addresses - T1590.005 Vulnerabilities - T1588.006 |
Common Information
| Type | Value |
|---|---|
| UUID | ac9cc2bd-8f15-4ff8-aef0-c133b62f5b92 |
| Fingerprint | b43159d6292db688 |
| Analysis status | DONE |
| Considered CTI value | 0 |
| Text language | |
| Published | Dec. 20, 2024, 3 p.m. |
| Added to db | Dec. 21, 2024, 3:44 a.m. |
| Last updated | Dec. 24, 2024, 1:59 a.m. |
| Headline | BeyondTrust Security Incident — Command Injection and Escalation Weaknesses (CVE-2024-12356, CVE-2024-12686) |
| Title | BeyondTrust Security Incident — Command Injection and Escalation Weaknesses (CVE-2024-12356, CVE-2024-12686) - SOCRadar® Cyber Intelligence Inc. |
| Detected Hints/Tags/Attributes | 28/1/11 |
Source URLs
| Redirection | Url | |
|---|---|---|
| Details | Source | https://socradar.io/beyondtrust-security-incident-command-injection/ |
URL Provider
RSS Feed
| Details | Id | Enabled | Feed title | Url | Added to db |
|---|---|---|---|---|---|
| Details | 238 | ✔ | SOCRadar® Cyber Intelligence Inc. | https://socradar.io/feed/ | 2024-08-30 22:08 |
Attributes
| Details | Type | #Events | CTI | Value |
|---|---|---|---|---|
| Details | CVE | 14 | cve-2024-12356 |
|
| Details | CVE | 7 | cve-2024-12686 |
|
| Details | IPv4 | 1 | 24.144.114.85 |
|
| Details | IPv4 | 1 | 142.93.119.175 |
|
| Details | IPv4 | 1 | 157.230.183.1 |
|
| Details | IPv4 | 1 | 192.81.209.168 |
|
| Details | IPv6 | 1 | 2604:a880:400:d1::7293:c001 |
|
| Details | IPv6 | 1 | 2604:a880:400:d1::72ad:3001 |
|
| Details | IPv6 | 1 | 2604:a880:400:d1::7716:1 |
|
| Details | IPv6 | 1 | 2604:a880:400:d1::7df0:7001 |
|
| Details | IPv6 | 1 | 2604:a880:400:d1::8622:f001 |