BeyondTrust Warns of Critical Vulnerabilities in Remote Access Software

BeyondTrust has warned users of the need to urgently install security updates for its Remote Support (RS) and Privileged Remote Access (PRA) products.

The Nature of the Problem

Two critical vulnerabilities have been discovered in the software, and exploiting them allows attackers to bypass authentication mechanisms. The company has not disclosed the specific technical details of the vulnerabilities.

What These Products Are

Remote Support and Privileged Remote Access are BeyondTrust solutions for providing employees and contractors with remote access to corporate systems while controlling privileges. Such tools are widely used by support desks and IT administrators to connect remotely to workstations and servers, so vulnerabilities in them pose an elevated risk to the infrastructure of client companies.

Recommendations

BeyondTrust strongly recommends that customers running the vulnerable versions of RS and PRA install the released fixes as soon as possible. The company emphasized the critical nature of the discovered problems, which points to a high likelihood of successful exploitation if the patches are not applied promptly.

The ability to bypass authentication in remote access systems is especially dangerous: it can open a path for attackers to gain unauthorized access to an organization's internal resources without needing to know valid credentials.

Users of the affected products should check the versions of the software they have installed and consult BeyondTrust's official materials for update instructions.

Source: Bleeping Computer