~/products/connectwise/manageditsync

pipeline liveDigest Docs

Connectwise Manageditsync vulnerabilities

1 known vulnerability affecting connectwise/manageditsync.

Total CVEs

1

CISA KEV

1

actively exploited

Public exploits

1

Exploited in wild

1

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2017-18362P1CRITICALCVSS 9.8KEVPoCRansomware≤ 20172019-02-05

CVE-2017-18362 [CRITICAL] CWE-89 CVE-2017-18362: ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated r ConnectWise ManagedITSync integration through 2017 for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database. In February 2019, attackers have actively exploited this in the wild to download and execute ransomware payloads on all endpoints managed by the VSA server. If the ManagedIT.asm

Connectwise Manageditsync vulnerabilities | cvebase