Known exploited vulnerabilities
Kaseya vulnerabilities attackers have used
Every Kaseya vulnerability in CISA's Known Exploited Vulnerabilities catalog, newest first, with the federal due date and whether it fed ransomware campaigns.
The short answer
CISA lists 3 Kaseya vulnerabilities as exploited in the wild, 0 of them added in the last 12 months and 3 used in ransomware campaigns. The most recent is CVE-2017-18362, added May 24, 2022. Virtual System/Server Administrator (VSA) has the most entries (3).
- In KEV, all time
- 3
- Added, last 12 months
- 0
- Used in ransomware
- 3
- New CVEs this week
- 0
Every Kaseya entry in CISA KEV
Kaseya VSA SQL Injection Vulnerability
ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.
Kaseya VSA Remote Code Execution Vulnerability
Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.
Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability
Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system.
Related
Know the day a CVE lands in your code
Connect a GitHub repository and ZeusQA checks its dependencies daily, briefs each advisory and opens the fix. Three test runs free, no card.