PT-2021-23731 · Kaseya · Kaseya Unitrends Backup Appliance

CVE-2021-43042

·

Published

2021-12-06

·

Updated

2022-11-28

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Kaseya Unitrends Backup Appliance versions prior to 10.5.5
Description A buffer overflow issue existed in the vaultServer component, which was exploitable by a remote unauthenticated attacker.
Recommendations For versions prior to 10.5.5, update to version 10.5.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the vaultServer component to minimize the risk of exploitation.

Exploit

Fix

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2021-43042

Affected Products

Kaseya Unitrends Backup Appliance