CVE-2018-20753—Kaseya VSA Remote Code Execution Vulnerability

PUBLISHEDvulnerability record
2022-04-13 · last modified June 21, 2025

Metadata

CVE ID:
CVE-2018-20753
Project:
Kaseya
Product:
Virtual System/Server Administrator (VSA)
Date Added:
2022-04-13
Due Date:
2022-05-04
Last Updated:
June 21, 2025

Vulnerability Name

Kaseya VSA Remote Code Execution Vulnerability

Description

Kaseya VSA RMM allows unprivileged remote attackers to execute PowerShell payloads on all managed devices.

Known To Be Used in Ransomware Campaigns?

Ransomware Status:
KNOWN

Action

Apply updates per vendor instructions.

Additional Notes

  • https://nvd.nist.gov/vuln/detail/CVE-2018-20753
browse all CVEs