https://blog.mirch.io/tags/appliance/ Recent content in appliance on Rich Mirch Hugo en-us Fri, 20 May 2022 14:50:25 +0000 https://blog.mirch.io/2022/05/20/exploiting-kaseya-unitrends-backup-appliance-part-1/ Fri, 20 May 2022 14:50:25 +0000 https://blog.mirch.io/2022/05/20/exploiting-kaseya-unitrends-backup-appliance-part-1/ <p>In 2021 I discovered several high and critical vulnerabilities in the <a href="https://www.unitrends.com/">Kaseya Unitrends</a> backup appliance. This research was conducted and published as part of my day job. Part one details a chain of vulnerabilities by leveraging an insecure <a href="https://www.postgresql.org/">PostgreSQL</a> database to ultimately gain shell access to the remote server. Visit <a href="https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1">https://www.cyberonesecurity.com/blog/exploiting-kaseya-unitrends-backup-appliance-part-1</a> for the full write-up. Stay tuned for part two.</p>