Vendor

Kaseya

3 of 3 Kaseya CVEs in Patchfirst (100%) are in of vulnerabilities exploited in the wild, 3 of them used by ransomware.

CVEs: 3
In CISA KEV: 3100%
Known ransomware use: 3
Median days to KEV: 1,163; from publication
Latest KEV listing: 24 May 2022

Watch Kaseya Subscribe (RSS) JSON Feed All feeds

Products

In KEVOther CVEs

ProductKEVCVEs
Virtual System/Server Administrator (VSA) In KEV: 3 CVEs: 3

Top ATT&CK techniques

What attackers do with Kaseya CVEs

TechniqueCVEs
T1190Exploit Public-Facing Application CVEs: 3
T1552Unsecured Credentials CVEs: 1
T1005Data from Local System CVEs: 1
T1059Command and Scripting Interpreter CVEs: 1
T1059.001PowerShell CVEs: 1

Open in ATT&CK Navigator

A layer for MITRE’s ATT&CK Navigator: techniques scored by the highest Patchfirst priority among their CVEs, neutral to red, with the CVE ids in each comment. “Open in Navigator” loads https://patchfirst.co/navigator/vendor/kaseya.json. Or download it and in Navigator choose Open Existing Layer → Upload from local.

Counts are Kaseya CVEs linked to the technique. Each link’s provenance is on the CVE page.

Kaseya CVEs

3 CVEs, by priority

CVE-2021-30116Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability
Kaseya · Virtual System/Server Administrator (VSA)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1552Unsecured Credentials1 report
85.7%Top 0.27%
83.7priority
CVE-2017-18362Kaseya VSA SQL Injection Vulnerability
Kaseya · Virtual System/Server Administrator (VSA)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059Command and Scripting Interpreter+1 more
86.8%Top 0.26%
79.8priority
CVE-2018-20753Kaseya VSA Remote Code Execution Vulnerability
Kaseya · Virtual System/Server Administrator (VSA)KEVRansomwarePublic exploitCritical · 9.8T1190Exploit Public-Facing Application T1059.001PowerShell
29.6%Top 1.8%
79.5priority