Vulnerability in N/a
CVE-2015-6922
Kaseya Virtual System Administrator (VSA) 7.x before 7.0.0.33, 8.x before 8.0.0.23, 9.0 before 9.0.0.19, and 9.1 before 9.1.0.9 does not properly require authentication, which allows remote attackers to bypass authentication and (1) add an…
EPSS: 0.778 (99.0th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- www.zerodayinitiative.com/advisories/ZDI-15-448 (x_refsource_MISC)
- packetstormsecurity.com/files/133782/Kaseya-Virtual-System-Administrator-Code-E… (x_refsource_MISC)
- www.zerodayinitiative.com/advisories/ZDI-15-449 (x_refsource_MISC)
- www.exploit-db.com/exploits/38351/ (x_refsource_MISC)
- helpdesk.kaseya.com/entries/96164487--Kaseya-Security-Advisory (x_refsource_MISC)
Frequently asked questions
- What is CVE-2015-6922?
- CVE-2015-6922 is a vulnerability in N/a. Published 2020-02-17.
- Is CVE-2015-6922 known to be exploited?
- 4 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.