CVE-2017-18362—Kaseya VSA SQL Injection Vulnerability

PUBLISHEDvulnerability record
2022-05-24 · last modified June 21, 2025

Metadata

CVE ID：
CVE-2017-18362
项目：
Kaseya
产品：
Virtual System/Server Administrator (VSA)
添加日期：
2022-05-24
到期日：
2022-06-14
最后更新：
June 21, 2025

漏洞名称

Kaseya VSA SQL Injection Vulnerability

描述

ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.

已知用于勒索软件活动吗？

勒索软件状态：
KNOWN

采集行动

The impacted product is end-of-life and should be disconnected if still in use.

其他说明

  • https://nvd.nist.gov/vuln/detail/CVE-2017-18362

相关 CWE

browse all CVEs