CVE-2021-43037: High severity unitrends backup vulnerability
Published Dec 6, 2021
·Updated
An issue was discovered in Kaseya Unitrends Backup Appliance before 10.5.5. The Unitrends Windows agent was vulnerable to DLL injection and binary planting due to insecure default permissions. This allowed privilege escalation from an unprivileged user to SYSTEM.
Affected Software
1 affected component
Kaseya Unitrends Backup>=10.0<10.5.5
Event History
Dec 6, 2021
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2021-43037?
CVE-2021-43037 is considered a high-severity vulnerability due to its potential for privilege escalation.
2
How do I fix CVE-2021-43037?
To fix CVE-2021-43037, update the Kaseya Unitrends Backup Appliance to version 10.5.5 or later.
3
Who is affected by CVE-2021-43037?
CVE-2021-43037 affects users of Kaseya Unitrends Backup versions prior to 10.5.5.
4
What type of vulnerability is CVE-2021-43037?
CVE-2021-43037 is a DLL injection and binary planting vulnerability that allows for privilege escalation.
5
Can CVE-2021-43037 be exploited remotely?
Yes, CVE-2021-43037 could potentially be exploited by unprivileged users to gain SYSTEM privileges.