CVE-2018-20753

The Kaseya VSA vulnerability allowed attackers to remotely execute PowerShell on managed devices, leading to ransomware infections across numerous organizations.

A critical remote code execution vulnerability in Kaseya VSA allowed unauthenticated attackers to execute arbitrary PowerShell code on managed endpoints, which was actively exploited in a ransomware attack. DIB organizations using Kaseya VSA must immediately patch and review their security posture to prevent similar compromises; this failure highlights the risk of supply chain vulnerabilities and inadequate security controls.

Shame score — The widespread ransomware infection resulting from this easily exploitable vulnerability demonstrates a significant failure in Kaseya's security practices and has severe reputational consequences.