Critical · published July 9, 2021
CVSS calls it critical at 9.8. It sits in the 99.1th percentile for exploit probability.
🚨 A free-for-all file upload is lurking in Kaseya VSA, waiting for an attacker to waltz in with a crafted request and gain total control over your server! 🔥 Imagine a delivery driver who’s given the keys to the entire warehouse, but instead of delivering packages, they can just stroll in, drop off anything they want, and even leave a surprise gift—like a time bomb! That's what this vulnerability allows for—unauthorized file uploads right into server directories. This isn't just a minor oversight; it’s absolutely devastating! An attacker can upload any file they choose, including malicious scripts, directly into your webroot. Once they do, it’s game over—their code can run with the same privileges as the web server, paving the way for a full system compromise, data theft, or worse. Stay safe, security heroes!
Imagine a delivery driver who’s given the keys to the entire warehouse, but instead of delivering packages, they can just stroll in, drop off anything they want, and even leave a surprise gift—like a time bomb! That's what this vulnerability allows for—unauthorized file uploads right into server directories. The vulnerability lies in the /SystemTab/uploader.aspx endpoint, which accepts file uploads without properly validating the provided sessionId. This allows attackers to upload arbitrary files, including executable ASP code, leading to remote code execution (RCE).
This isn't just a minor oversight; it’s absolutely devastating! An attacker can upload any file they choose, including malicious scripts, directly into your webroot. Once they do, it’s game over—their code can run with the same privileges as the web server, paving the way for a full system compromise, data theft, or worse. Stay safe, security heroes! Immediately apply the latest patch from Kaseya for version 9.5.4.2149. Implement strict validation checks on the sessionId and restrict file uploads to only necessary file types in designated directories. Ensure proper access controls are in place to prevent unauthorized access. You've got this! Follow these steps, and you'll have your system locked down in no time. 🛡️