CVE-2017-18362
CISA 기관 조치 기한: 2022-06-14
Kaseya Virtual System/Server Administrator (VSA)
ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.
KEV 필수 조치: The impacted product is end-of-life and should be disconnected if still in use.
공개 익스플로잇 / PoC
- GitHub 공개 PoC 1건 — 대표 레포 ↗