CVE-2021-43040

Mô tả

Tham khảo

• helpdesk.kaseya.com/hc/en-gb/articles/4412762258961 · Vendor Advisory
• cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1 · Exploit
• cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2 · Exploit

Lỗ hổng khác của unitrends backup

• CVE-2021-40386NGHIÊM TRỌNG 9.8Kaseya Unitrends Client/Agent through 10.5,5 allows remote attackers to execute arbitrary code.
• CVE-2021-43044NGHIÊM TRỌNG 9.8An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The SNMP daemon was configured with a weak default community.
• CVE-2021-43043TRUNG BÌNH 6.5An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The apache user could read arbitrary files such as /etc/shadow b…
• CVE-2021-43042NGHIÊM TRỌNG 9.8An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow existed in the vaultServer component. This was…
• CVE-2021-43041CAO 8.8An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerabilit…