CVE-2018-20753
Kaseya VSA Remote Code Execution Vulnerability
CVSS
9.8
Crítico
EPSS
29.6%
p98
KEV
SÍ
13 abr 2022
Exploit Today
79
0-100
Publicado: 5 feb 2019 · Última mod.: 13 ago 2026
Producto
Kaseya / Virtual System/Server Administrator (VSA)
Vulnerabilidad
Kaseya VSA Remote Code Execution Vulnerability
Añadido a KEV
13 abr 2022
Remediar antes de
4 may 2022
Uso conocido en ransomware
Sí
Descripción resumida
Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.
Acción requerida
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2018-20753
Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild.
- blog.huntresslabs.comhttps://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88
- helpdesk.kaseya.comhttps://helpdesk.kaseya.com/hc/en-gb/articles/360000333152
- blog.huntresslabs.comhttps://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88
- helpdesk.kaseya.comhttps://helpdesk.kaseya.com/hc/en-gb/articles/360000333152
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-20753