VulnerabilityModified

CVE-2015-6922

CRITICAL 9.8EPSS 82.1%

Does this matter?

EPSS puts the probability of exploitation in the next 30 days at 82.1%, higher than 100% of all known CVEs. Patch or mitigate before the next change window.

Description

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted request to LocalAuth/setAccount.aspx or (2) write to and execute arbitrary files via a full pathname in the PathData parameter to ConfigTab/uploader.aspx.

CVSS 3.1: 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS: 82.10% probability · 100th percentile
CISA KEV: Not listed
Weakness: CWE-287
Affected: kaseya/virtual system administrator
Source: cve@mitre.org

References

http://packetstormsecurity.com/files/133782/Kaseya-Virtual-System-Administrator-Code-Execution-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-448Third Party Advisory, VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-449Third Party Advisory, VDB Entry
https://helpdesk.kaseya.com/entries/96164487--Kaseya-Security-AdvisoryBroken Link, Vendor Advisory
https://www.exploit-db.com/exploits/38351/Exploit, Third Party Advisory, VDB Entry
http://packetstormsecurity.com/files/133782/Kaseya-Virtual-System-Administrator-Code-Execution-Privilege-Escalation.htmlExploit, Third Party Advisory, VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-448Third Party Advisory, VDB Entry
http://www.zerodayinitiative.com/advisories/ZDI-15-449Third Party Advisory, VDB Entry
https://helpdesk.kaseya.com/entries/96164487--Kaseya-Security-AdvisoryBroken Link, Vendor Advisory
https://www.exploit-db.com/exploits/38351/Exploit, Third Party Advisory, VDB Entry

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.