Kaseya Rules Out Supply-Chain Attack; Says VSA 0-Day Hit Its Customers Directly

🗓️ 06 Jul 2021 07:03:00Reported by The Hacker NewsType

Kaseya denies supply-chain attack; VSA 0-day hit customers directly. REvil ransomware demands $50 million after paralyzing 60 MSPs and 1,500 businesses worldwide

Reporter	Title	Published	Views	Family All 38
ATTACKERKB	CVE-2021-30116	9 Jul 202100:00	–	attackerkb
Information Security Automation	Last Week’s Security news: PrintNightmare patches and Metasploit, Kaseya CVEs, Morgan Stanley Accellion FTA, Cisco BPA and WSA, Philips Vue PACS, CISA RVAs, Lazarus job offers	11 Jul 202120:52	–	avleonov
Information Security Automation	Last Week’s Security news: Exploits for ForgeRock, vSphere, Apache Tomcat, new Print Spooler vuln, Kaseya Patch and REvil, SolarWinds, Schneider Electric, Bulletins	19 Jul 202116:29	–	avleonov
BDU FSTEC	The vulnerability of the software for remote monitoring and management of IT systems by Kaseya VSA, related to insufficient protection of registration data, allows a hacker to disclose sensitive information that should be protected.	17 Dec 202100:00	–	bdu_fstec
Circl	CVE-2021-30116	5 Jul 202110:55	–	circl
CISA KEV Catalog	Kaseya Virtual System/Server Administrator (VSA) Information Disclosure Vulnerability	3 Nov 202100:00	–	cisa_kev
CNNVD	Kaseya VSA 输入验证错误漏洞	5 Jul 202100:00	–	cnnvd
CNVD	Kaseya VSA Input Validation Error Vulnerability	6 Jul 202100:00	–	cnvd
Check Point Advisories	Kaseya VSA Remote Code Execution (CVE-2021-30116)	27 Dec 202100:00	–	checkpoint_advisories
CVE	CVE-2021-30116	9 Jul 202100:00	–	cve

07 Jul 2021 04:45Current

0.6Low risk

Vulners AI Score0.6

CVSS 27.5

CVSS 3.19.8 - 10

EPSS0.85735