CVE-2021-43040

Name of the Vulnerable Software and Affected Versions Kaseya Unitrends Backup Appliance versions prior to 10.5.5

Description An issue was discovered where the privileged vaultServer could be leveraged to create arbitrary writable files, leading to privilege escalation.

Recommendations For versions prior to 10.5.5, update to version 10.5.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the vaultServer to minimize the risk of exploitation.