Vulnerabilities CVE-2018-20753

CVE-2018-20753

Medium

Open

KEV

TLP:CLEAR

Kaseya VSA Remote Code Execution Vulnerability

NVD CVE.org

Supply Chain Attack

AI Analysis

No AI analysis yet.

Description

Kaseya VSA RMM before R9.3 9.3.0.35, R9.4 before 9.4.0.36, and R9.5 before 9.5.0.5 allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. In January 2018, attackers actively exploited this vulnerability in the wild.

Details

EPSS Score ⓘ: 29.34%

98th percentile
Confidence: 100%
Published: Feb 5, 2019
Last Modified: Aug 13, 2026
CISA KEV
Date Added: Apr 13, 2022
Patch Due: May 4, 2022
Required Action: Apply updates per vendor instructions.

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.