All CVEs
CVE-2018-20753
CRITICAL9.8
CISA KEV
Published 2019-02-05 · Updated 2026-08-13 · Source cve@mitre.org
Description
Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild.
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA Known-Exploited Vulnerability
Product: Kaseya — Virtual System/Server Administrator (VSA)
Name: Kaseya VSA Remote Code Execution Vulnerability
Date added: 2022-04-13 · Due: 2022-05-04
USED IN RANSOMWARE
Required action: Apply updates per vendor instructions.
References
- https://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88
- https://helpdesk.kaseya.com/hc/en-gb/articles/360000333152
- https://blog.huntresslabs.com/deep-dive-kaseya-vsa-mining-payload-c0ac839a0e88
- https://helpdesk.kaseya.com/hc/en-gb/articles/360000333152
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-20753