CVE-2018-20753
Kaseya VSA Remote Code Execution Vulnerability
CVSS
9.8
Crítica
EPSS
29.6%
p98
KEV
SIM
13 de abr. de 2022
Exploit Today
79
0-100
Publicado: 5 de fev. de 2019 · Última mod.: 13 de ago. de 2026
Produto
Kaseya / Virtual System/Server Administrator (VSA)
Vulnerabilidade
Kaseya VSA Remote Code Execution Vulnerability
Adicionado ao KEV
13 de abr. de 2022
Corrigir até
4 de mai. de 2022
Uso conhecido em ransomware
Sim
Descrição resumida
Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.
Ação necessária
Apply updates per vendor instructions.
Notas
https://nvd.nist.gov/vuln/detail/CVE-2018-20753
Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild.
- blog.huntresslabs.comhttps://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88
- helpdesk.kaseya.comhttps://helpdesk.kaseya.com/hc/en-gb/articles/360000333152
- blog.huntresslabs.comhttps://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88
- helpdesk.kaseya.comhttps://helpdesk.kaseya.com/hc/en-gb/articles/360000333152
- www.cisa.govhttps://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-20753