CVE-2021-30118

CVE-2021-30118 is a critical unauthenticated arbitrary file upload vulnerability affecting Kaseya VSA Unified Remote Monitoring & Management (RMM) versions prior to 9.5.7. An attacker can exploit this flaw by uploading malicious files, such as ASP commands, to the web server with its privileges, leading to remote code execution. This vulnerability has a CVSS score of 9.8 (CRITICAL) due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While no Metasploit or ExploitDB modules are publicly available, Nuclei templates exist, and the vulnerability has garnered significant community discussion and media coverage, indicating active exploitation in the wild, notably in REvil ransomware attacks.