CVE-2021-30116 · Sandworm Watch

Nov 3, 2021high

CVE-2021-30116: Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability

Kaseya Virtual System/Server Administrator (VSA) contains an information disclosure vulnerability allowing an attacker to obtain the sessionId that can be used to execute further attacks against the system. Required action: Apply updates per vendor instructions.

CVE-2021-30116EPSS 85.6%KaseyaVirtual System/Server Administrator (VSA)

CISA KEV ↗ · unattributed attribution