Threat database

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.

CVE-2018-20753 is a remote code execution vulnerability in Kaseya Virtual System/Server Administrator (VSA) that allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. This vulnerability has been exploited in the wild and is known to have been used in ransomware campaigns. No specific affected versions or patch information is provided in the available data.

Kaseya Virtual System/Server Administrator (VSA) has an information disclosure vulnerability (CVE-2021-30116) that allows attackers to obtain session IDs. These session IDs can be leveraged to conduct further attacks against the system. The vulnerability has been exploited in the wild and is associated with known ransomware campaigns. No specific affected versions or patch information are provided.