Ransomwarecritical
Kaseya Releases Patches for Flaws Exploited in Widespread Ransomware Attack
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-30116 | Credential Disclosure via Unauthenticated Download Page in Kaseya VSA | 9.8 | 86% | KEVRansomwarePoC | KEV |
| CVE-2021-30118 | An attacker can upload files with the privilege of the Web Server process for Kaseya VSA Unified Remote Monitoring & Management (RMM) 9.5.4.2149 and… | 9.8 group max | 60% | PoC |
From the original article
3 min read at thehackernews.com
Florida-based software vendor Kaseya on Sunday rolled out urgent updates to address critical security vulnerabilities in its Virtual System Administrator (VSA) solution that was used as a jumping off point to target as many as 1,500 businesses across the globe as part of a widespread supply-chain ransomware attack .
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.