Software Engineering Institute

CWE-476: NULL Pointer Dereference

Kaseya's agent driver, kapfa.sys, is vulnerable to a NULL pointer dereference.

A local authenticated attacker may be able to cause a denial-of-service condition or achieve code execution with the privileges of the Windows kernel.

Kaseya has released patches with the following instructions:

"For VSA Version 7.0, install patch 7.0.0.16 and then update your agents to version 7.0.0.3 or higher (Agent-> Upgrade Agent->Update Agent).

For VSA Version 6.5, install patch 6.5.0.17 and then update your agents to version 6.5.0.2 or higher (Agent-> Upgrade Agent->Update Agent).

For VSA 6.3 or earlier, it is recommended to upgrade the system to version 6.5 or 7.0."