cve/2021/CVE-2021-43041.md

CVE-2021-43041

Description

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A crafted HTTP request could induce a format string vulnerability in the privileged vaultServer application.

POC

Reference

• https://helpdesk.kaseya.com/hc/en-gb/articles/4412762258961
• https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1
• https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2

Github

No PoCs found on GitHub currently.