CVE-2021-43037

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows agent was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed privilege escalation from an unprivileged user to SYSTEM.

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

6.9 MEDIUMAV:L/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.52% chance of exploitation in the next 30 days, 43rd percentile

Published

2021-12-06

Updated

2024-08-04

Proof-of-concept exploits (2)

• https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1
• https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2

Security advisories

• https://helpdesk.kaseya.com/hc/en-gb/articles/4412762258961

References

• CVE Record
• NVD entry