CVE-2023-4310: 
BeyondTrust Privileged Remote Access Client vulnerability analysis and mitigation

CVE-2023-4310 affects BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) versions 23.2.1 and 23.2.2. The vulnerability was discovered during testing and disclosed in August 2023, requiring immediate attention. It is classified as a command injection vulnerability that can be exploited through malicious HTTP requests (BeyondTrust Blog, NVD).

The vulnerability is classified as a command injection vulnerability (CWE-77) that allows exploitation through malicious HTTP requests. It received a CVSS v3.1 base score of 9.8 CRITICAL with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H, indicating high severity across confidentiality, integrity, and availability impacts (NVD).

Successful exploitation of this vulnerability allows an unauthenticated remote attacker to execute underlying operating system commands within the context of the site user, potentially leading to complete system compromise (NVD).

The vulnerability has been fixed in version 23.2.3. Users of affected versions (23.2.1 and 23.2.2) should upgrade to this patched version immediately (NVD, BeyondTrust Blog).