A critical vulnerability has been discovered in Privileged Remote Access (PRA) and Remote Support (RS) products which can allow an unauthenticated attacker to inject commands that are run as a site user.
id: CVE-2024-12356
info:
name: Privileged Remote Access & Remote Support - Command Injection
au
...