3 source-linked records in the current knowledge graph.
ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. Required action: The impacted product is end-of-life and should be disconnected if still in use.
CISA KEV ↗ · unattributed attributionKaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attributionKaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system. Required action: Apply updates per vendor instructions.
CISA KEV ↗ · unattributed attribution