Unrated severityNVD Advisory· Published Dec 6, 2021· Updated Aug 4, 2024

CVE-2021-43034

Description

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A world writable file allowed local users to execute arbitrary code as the user apache, leading to privilege escalation.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Kaseya/Unitrends Backup Appliancedescription
Kaseya/Unitrends Backupllm-fuzzy
Range: <10.5.5

Patches

Vulnerability mechanics

References

helpdesk.kaseya.com/hc/en-gb/articles/4412762258961mitre
www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1mitre
www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000