CVE-2018-20753

Kaseya VSA Remote Code Execution Vulnerability

Virtual System Administrator

Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild.

5. Feb 2019

Ausgewertete Quellen

• Hersteller
  https://helpdesk.kaseya.com/hc/en-gb/articles/360000333152
• Hinweis
  https://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88
• CISA
  https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-20753
• CISA
  Kaseya VSA Remote Code Execution Vulnerability
• NVD
  CVE-2018-20753