PT-2019-10202 · Kaseya · Kaseya Vsa Rmm

Publicado 2019-02-05 · Atualizado 2025-03-14 · CVE-2018-20753

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Kaseya VSA RMM versions prior to 9.3.0.35 Kaseya VSA RMM versions prior to 9.4.0.36 Kaseya VSA RMM versions prior to 9.5.0.5

Description: The issue allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this issue in the wild.

Recommendations: For versions prior to 9.3.0.35, update to version 9.3.0.35 or later. For versions prior to 9.4.0.36, update to version 9.4.0.36 or later. For versions prior to 9.5.0.5, update to version 9.5.0.5 or later.

Exploit

Correção

Identificadores relacionados

CVE-2018-20753

Produtos afetados

Kaseya Vsa Rmm

Referências · 6

• 🔥 https://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88 · Exploit
• https://helpdesk.kaseya.com/hc/en-gb/articles/360000333152 · Aviso do Fabricante
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-20753 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-20753 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-20753 · Aviso do Fabricante
• https://t.me/cvenotify/114828 · Publicação no Telegram