Critical · published February 5, 2019
CVSS calls it critical at 9.8. It is confirmed in active exploitation. It sits in the 98.2th percentile for exploit probability.
🚨 Kaseya VSA RMM versions before R9.5.0.5 are a playground for unprivileged attackers, allowing them to execute PowerShell commands remotely on all managed devices—yikes! 🔥 This vulnerability is like leaving the front door of your IT infrastructure wide open, inviting intruders to stroll in and start messing with your systems without needing a key. Just a few keystrokes, and poof! Your devices are under their control! With this critical vulnerability, an attacker could unleash PowerShell payloads, executing commands as if they were the administrator. This means they could potentially steal sensitive data, deploy malware, or disrupt operations—an absolutely devastating scenario for any organization. You don't want to be on the receiving end of a cyber disaster!
This vulnerability is like leaving the front door of your IT infrastructure wide open, inviting intruders to stroll in and start messing with your systems without needing a key. Just a few keystrokes, and poof! Your devices are under their control! CVE-2018-20753 allows unprivileged remote attackers to execute arbitrary PowerShell scripts on all managed devices through flaws in Kaseya VSA RMM before versions 9.3.0.35, 9.4.0.36, and 9.5.0.5. Attackers can exploit this vulnerability to gain unauthorized access and control over systems.
With this critical vulnerability, an attacker could unleash PowerShell payloads, executing commands as if they were the administrator. This means they could potentially steal sensitive data, deploy malware, or disrupt operations—an absolutely devastating scenario for any organization. You don't want to be on the receiving end of a cyber disaster! Update your Kaseya VSA RMM to the latest versions: 9.3.0.35, 9.4.0.36, or 9.5.0.5 immediately. Regularly audit your systems to ensure no lingering vulnerabilities exist, and implement strict access controls to minimize risks. 🛡️ You can tackle this! Follow these steps, and you’ll be securing your environment in no time. You've got this! 💪😊
| Product | Versions | Fixed in |
|---|---|---|
| kaseya/virtual_system_administrator | ≥ 9.3, < 9.3.0.35 | 9.3.0.35 |
| kaseya/virtual_system_administrator | ≥ 9.4, < 9.4.0.36 | 9.4.0.36 |
| kaseya/virtual_system_administrator | ≥ 9.5, < 9.5.0.5 | 9.5.0.5 |