CVE

CVE-2017-18362

P1⬤ KNOWN RANSOMWARE USE

Kaseya VSA SQL Injection Vulnerability

Kaseya · Virtual System/Server Administrator (VSA)

Date added (CISA)

2022-05-24

Remediation due

2022-06-14

Known ransomware use

Yes

Remediation priority

P1 — known ransomware use · past CISA due date

Description

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.

Source: NVD ↗ · CISA KEV Catalog ↗