CVE-2019-14510

CVE-2019-14510 describes a vulnerability in Kaseya VSA RMM through version 9.5.0.22, where the LAN Cache feature creates a highly privileged local or domain account (FSAdminxxxxxxxxx) on affected systems, including Domain Controllers. This account is automatically added to the local or domain Administrators group. An attacker with access to any LAN Cache client can leverage this by using Pass-the-Hash techniques with the FSAdminxxxxxxxxx account to gain administrative control over Domain Controllers. The vulnerability has a CVSS score of 6.7 (Medium), indicating a local attack vector with low complexity and high impact on confidentiality, integrity, and availability. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.