- Vendor / Project
- Kaseya
- Product
- Virtual System/Server Administrator (VSA)
- Date added
- May 24, 2022
- Due date
- Jun 14, 2022
- Known ransomware use
- Known
- CWEs
- CWE-89
Description
ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.
Required action
The impacted product is end-of-life and should be disconnected if still in use.