CVE-2017-12478

Unitrends UEB (Unitrends Backup) before 10.0.0 is affected by an input validation flaw in the api/storage web interface that allows remote authentication bypass and arbitrary command execution with root privileges. The issue has been exploited in multiple public advisories and exploits (e.g., Exp...

CVE-2017-12477

Unitrends UEB bpserverd in UB versions prior to 10.0.0 is vulnerable to an authentication bypass via the bpserverd protocol exposed through xinetd, enabling remote root command execution. Public references (exploit-db, metasploit, OpenVAS entries) document the RCE actions. Affected: Unitrends Bac...

CVE-2018-6328

CVE-2018-6328 affects Unitrends Backup/UEB before 10.1.0 where the UI authentication bypass can allow an unauthenticated user to inject commands into /api/hosts via backquotes. The vulnerability enables remote code execution with high impact, as described in public references and exploit entries....

CVE-2021-43033

CVE-2021-43033 affects Kaseya Unitrends Backup Appliance, specifically the bpserverd daemon. Versions prior to 10.5.5 are vulnerable to arbitrary remote code execution as root due to untrusted input being passed to system calls. The impact is full compromise of the appliance (remote code executio...

CVE-2021-43035

CVE-2021-43035 affects Kaseya Unitrends Backup Appliance prior to version 10.5.5. Two unauthenticated SQL injection flaws allow arbitrary SQL to be injected and executed with the postgres superuser, enabling remote code execution and full access to the postgres account. Remediation per connected ...

CVE-2021-43036

The CVE-2021-43036 issue affects Kaseya Unitrends Backup Appliance prior to 10.5.5, where the PostgreSQL wguest account uses a weak password. This is documented in multiple sources; the core detail is the weak wguest password in the affected appliance. Impact is described as a privileged access r...

CVE-2021-40386

CVE-2021-40386 affects the Kaseya Unitrends Client/Agent up to version 10.5.5. The provided documents confirm a vulnerability that allows remote attackers to execute arbitrary code on affected installations. The exact root cause, vulnerable component, and exploit details are not described in the ...

CVE-2017-12479

CVE-2017-12479 – Unitrends Backup : Affects UB prior to 10.0.0. The issue is in session handling, where an attacker with existing low-privilege credentials can leverage the LOGDIR environment variable during a web session to elevate to root and execute arbitrary commands with root privileges. Thi...

CVE-2021-43038

Summary: CVE-2021-43038 affects Kaseya Unitrends Backup Appliance prior to 10.5.5. The issue allows the wguest user to inject commands into PostgreSQL trigger functions, enabling privilege escalation to the postgres user. Affected product/versions: Kaseya Unitrends Backup Appliance before 10.5.5....

CVE-2021-43041

Summary: CVE-2021-43041 affects the Kaseya Unitrends Backup Appliance prior to 10.5.5. The vulnerability is in the privileged vaultServer component and is triggered by a crafted HTTP request that causes a format string vulnerability. The CVSS data in the initial record indicates high impact (C/H/...

CVE-2021-43034

CVE-2021-43034 affects the Kaseya Unitrends Backup Appliance prior to 10.5.5. A world-writable file allows local users to execute arbitrary code as the apache user, enabling privilege escalation . The issue is documented across multiple sources confirming the vulnerable version range and the loca...

CVE-2021-43040

Affected software: Kaseya Unitrends Backup Appliance prior to 10.5.5. Root cause / vulnerability: Privileged vaultServer can be leveraged to create arbitrary writable files, enabling privilege escalation. This is consistently described across multiple sources as the underlying issue in vulnerable...

CVE-2021-43037

CVE-2021-43037 affects Kaseya Unitrends Backup Appliance prior to 10.5.5. The issue is in the Unitrends Windows agent, which is vulnerable to DLL injection and binary planting due to insecure default permissions, enabling privilege escalation from an unprivileged user to SYSTEM . Affected compone...

CVE-2021-43042

CVE-2021-43042 affects Kaseya Unitrends Backup Appliance versions prior to 10.5.5. The issue is a buffer overflow in the vaultServer component, exploitable by a remote unauthenticated attacker. Documented in multiple sources, remediation guidance specifies upgrading to 10.5.5 or later; a temporar...

CVE-2021-43044

The CVE-2021-43044 issue affects Kaseya Unitrends Backup Appliance prior to version 10.5.5. The SNMP daemon is configured with a weak default community string, enabling potential SNMP control privileges for an attacker via network access. Affected component: SNMP daemon; root cause: weak default ...

CVE-2021-43043

CVE-2021-43043 affects Kaseya Unitrends Backup Appliance (pre-10.5.5). The issue is an insecure sudo rule that allows the apache user to read arbitrary files (for example /etc/shadow), leading to a local file disclosure vulnerability. Root cause: misconfigured sudo privileges enabling read access...

CVE-2021-43039

Affected product: Kaseya Unitrends Backup Appliance (prior to 10.5.5). Issue: Samba file sharing service allows anonymous read/write access, enabling potential unauthorized file creation/editing on vulnerable deployments. Root cause: misconfig/ flaw in Samba access on the Appliance leading to una...