{
  "id": "CVE-2021-30116",
  "vendor_project": "Kaseya",
  "product": "VSA",
  "description": "Zero-day credential leak and remote command injection flaw abused by REvil / Sodinokibi to encrypt over 1,500 downstream businesses.",
  "kev_date_added": "2021-11-03",
  "cvss": 9.8,
  "severity": "Critical",
  "advisories": [
    "AA21-188A"
  ],
  "cited_in_cases": [
    {
      "slug": "us-v-vasinskyi-kaseya-revil",
      "title": "U.S. v. Yaroslav Vasinskyi (Kaseya VSA / REvil Ransomware)",
      "actor_slug": "revil-sodinokibi"
    }
  ],
  "indictment_cited": true
}