CVEs-PoC/2021/CVE-2021-43042.md

CVE-2021-43042

Description

An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. A buffer overflow existed in the vaultServer component. This was exploitable by a remote unauthenticated attacker.

POC

Reference

• https://helpdesk.kaseya.com/hc/en-gb/articles/4412762258961
• https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1
• https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-2

Github

No PoCs found on GitHub currently.