CVE-2017-18362Used in ransomware
KA
Kaseya Virtual System/Server Administrator (VSA)
Kaseya VSA SQL Injection Vulnerability
What it is
ConnectWise ManagedITSync integration for Kaseya VSA is vulnerable to unauthenticated remote commands that allow full direct access to the Kaseya VSA database.
What to do
The impacted product is end-of-life and should be disconnected if still in use.
Vendor notices and references
Description and required action as published by CISA. Full record at NVD.