CVEs-PoC/2021/CVE-2021-43039.md

CVE-2021-43039

Description

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Samba file sharing service allowed anonymous read/write access.

POC

Reference

• https://helpdesk.kaseya.com/hc/en-gb/articles/4412762258961
• https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1
• https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2

Github

No PoCs found on GitHub currently.