PT-2021-23727 · Kaseya · Kaseya Unitrends Backup Appliance

Rich Mirch · Published 2021-12-06 · Updated 2022-11-28 · CVE-2021-43038

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Kaseya Unitrends Backup Appliance versions prior to 10.5.5

Description An issue was discovered in the Kaseya Unitrends Backup Appliance where the wguest account could execute commands by injecting into PostgreSQL trigger functions, allowing privilege escalation from the wguest user to the postgres user.

Recommendations For versions prior to 10.5.5, update to version 10.5.5 or later to resolve the issue. As a temporary workaround, consider restricting access to PostgreSQL trigger functions to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

Weakness Enumeration

CWE-74

Related Identifiers

CVE-2021-43038

Affected Products

Kaseya Unitrends Backup Appliance

References · 7

• 🔥 https://cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1 · Exploit
• 🔥 https://cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2 · Exploit
• https://osv.dev/vulnerability/CVE-2021-43038 · Vendor Advisory
• https://helpdesk.kaseya.com/hc/en-gb/articles/4412762258961 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-43038 · Security Note
• https://t.me/cvenotify/24252 · Telegram Post
• https://t.me/cibsecurity/33362 · Telegram Post