CVE-2018-20753

Kaseya VSA Remote Code Execution Vulnerability
29.6%
EPSS
98%
Percentile
Yes
Known exploited
0
APAC news · 90d
Summary

Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.

Vendor
Kaseya
Product
Virtual System/Server Administrator (VSA)
Added to KEV
Apr 13, 2022
Remediation due
May 4, 2022 (US federal deadline)
Ransomware use
Known
EPSS
29.6% as of Nov 12
In the news
  • No Asia-Pacific article names this CVE yet.
Linked
Actors named alongside it:
none
Incidents exploiting it:
  • none recorded