CVE-2015-6922

EPSS 82.1%

Vexday Risk Score

60Atención

Decisión SSVC (CISA)

Attend

PoC disponible → seguir de cerca

Madurez del exploit

Exploit funcional

Exploit automatizable disponible (Nuclei/Metasploit).

CVSS —EPSS 82.1%KEV nãoPoC públicaNuclei —Metasploit simPatch —

Ciclo de vida

23 sep 2015Exploit Metasploit disponible

29 sep 2015PoC pública

17 feb 2020Publicada en NVD

Recomendación: Planificar corrección próxima — ya existe PoC pública.

Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an administrative account via crafted request to LocalAuth/setAccount.aspx or (2) write to and execute arbitrary files via a full pathname in the PathData parameter to ConfigTab/uploader.aspx.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 4

cve_referencepacketstormsecurity.com/files/133782/Kaseya-Virtual-System-Administrator-Code-Execution-Privilege-Escalation.htmlno verificado cve_referencewww.exploit-db.com/exploits/38351/no verificado exploitdbwww.exploit-db.com/exploits/38351no verificado exploitdbwww.exploit-db.com/exploits/38401no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

Referencias

http://packetstormsecurity.com/files/133782/Kaseya-Virtual-System-Administrator-Code-Execution-Privilege-Escalation.html https://helpdesk.kaseya.com/entries/96164487--Kaseya-Security-Advisory https://www.exploit-db.com/exploits/38351/http://www.zerodayinitiative.com/advisories/ZDI-15-448 http://www.zerodayinitiative.com/advisories/ZDI-15-449