CVE-2021-43044: 
Kaseya Unitrends Agent vulnerability analysis and mitigation

CVE-2021-43044 affects Kaseya Unitrends Backup Appliance versions before 10.5.5. The vulnerability involves a weak default community string configuration in the SNMP daemon, which was discovered and disclosed in December 2021 (Vendor Advisory).

The vulnerability is classified with a CVSS v3.1 Base Score of 9.8 CRITICAL (Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) and a CVSS v2.0 Base Score of 7.5 HIGH. The issue stems from the SNMP daemon being configured with a weak default community string, which could potentially allow unauthorized access to system information (NVD Database).

The vulnerability could potentially expose sensitive system information through the SNMP service, as the weak default community string configuration could allow unauthorized access to the system's SNMP data (Vendor Advisory).

The vulnerability has been assigned a CVSS severity rating of 6.5 (Medium), indicating moderate exploitability. The issue can be exploited remotely by an unauthenticated attacker who can access the SNMP service (Vendor Advisory).

Users should update to Unitrends software version 10.5.5 or later to address this vulnerability. This update includes fixes for the weak SNMP community string configuration along with several other security improvements (Vendor Advisory).