CVE-2019-14510
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Kaseya VSA RMM是瑞士卡西亚（Kaseya）公司的一套远程监控和终端管理解决方案。 Kaseya VSA RMM 9.5.0.22及之前版本中存在安全漏洞。攻击者可利用该漏洞获取管理权限。
Possible ATT&CK Techniques 3 AI
T1078.002 · Domain Accounts T1098.001 · Additional Cloud Credentials T1550.001 · Application Access Token
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2019-14510
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An issue was discovered in Kaseya VSA RMM through 9.5.0.22. When using the default configuration, the LAN Cache feature creates a local account FSAdminxxxxxxxxx (e.g., FSAdmin123456789) on the server that hosts the LAN Cache and all clients that are assigned to a LAN Cache. This account is placed into the local Administrators group of all clients assigned to the LAN Cache. When the assigned client is a Domain Controller, the FSAdminxxxxxxxxx account is created as a domain account and automatically added as a member of the domain BUILTIN\Administrators group. Using the well known Pass-the-Hash techniques, an attacker can use the same FSAdminxxxxxxxxx hash from any LAN Cache client and pass this to a Domain Controller, providing administrative rights to the attacker on any Domain Controller. (Local account Pass-the-Hash mitigations do not protect domain accounts.)
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Kaseya VSA RMM 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Kaseya VSA RMM是瑞士卡西亚（Kaseya）公司的一套远程监控和终端管理解决方案。 Kaseya VSA RMM 9.5.0.22及之前版本中存在安全漏洞。攻击者可利用该漏洞获取管理权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2019-14510
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2019-14510
请登录查看更多情报信息。
Security Blog Posts for CVE-2019-14510 (2)
-
https://lockstepgroup.com/blog/abusing-the-kaseya-lan-cache-fsadmin/ x_refsource_MISC
Other References for CVE-2019-14510 (3)
-
http://community.kaseya.com/xsp/f/355.aspx x_refsource_MISC
-
http://community.kaseya.com/xsp/f/355/t/24675.aspx x_refsource_MISC
-
https://www.kaseya.com/products/vsa/ x_refsource_MISC
Same Patch Batch · n/a · 2019-10-11 · 44 CVEs total
| CVE-2015-9481 | WordPress ThemeMakers Diplomat|Political theme 信息泄露漏洞 | |
| CVE-2019-17504 | Kirona Solutions Dynamic Resource Scheduling 跨站脚本漏洞 | |
| CVE-2019-17503 | Kirona Solutions Dynamic Resource Scheduling 信息泄露漏洞 | |
| CVE-2010-5334 | IceWarp Webclient 路径遍历漏洞 | |
| CVE-2010-5337 | IceWarp Webclient 跨站脚本漏洞 | |
| CVE-2010-5338 | IceWarp Webclient 跨站脚本漏洞 | |
| CVE-2010-5339 | IceWarp Webclient 跨站脚本漏洞 | |
| CVE-2010-5340 | IceWarp Webclient 跨站脚本漏洞 | |
| CVE-2019-17499 | Compal CH7465LG 操作系统命令注入漏洞 | |
| CVE-2010-5336 | IceWarp Webclient 跨站脚本漏洞 | |
| CVE-2019-17059 | Sophos Cyberoam firewall appliance CyberoamOS 注入漏洞 | |
| CVE-2015-9482 | WordPress ThemeMakers Car Dealer / Auto Dealer Responsive theme 信息泄露漏洞 | |
| CVE-2015-9483 | WordPress ThemeMakers Invento Responsive Gallery/Architecture Template 信息泄露漏洞 | |
| CVE-2015-9484 | WordPress ThemeMakers Accio One Page Parallax Responsive theme 信息泄露漏洞 | |
| CVE-2015-9485 | WordPress ThemeMakers Accio Responsive Parallax One Page Site Template信息泄露漏洞 | |
| CVE-2015-9486 | WordPress ThemeMakers Axioma Premium Responsive theme 信息泄露漏洞 | |
| CVE-2015-9487 | WordPress ThemeMakers Almera Responsive Portfolio theme 信息泄露漏洞 | |
| CVE-2015-9488 | WordPress ThemeMakers Almera Responsive Portfolio Site Template 信息泄露漏洞 | |
| CVE-2015-9489 | WordPress ThemeMakers Goodnex Premium Responsive theme 信息泄露漏洞 | |
| CVE-2015-9490 | WordPress ThemeMakers GamesTheme Premium theme 信息泄露漏洞 |
Showing top 20 of 44 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
V. Comments for CVE-2019-14510
No comments yet