Vinchin Vinchin Backup And Recovery
9 CVEs affecting Vinchin Vinchin Backup And Recovery. Latest disclosed: 2024-03-14. Critical: 5, High: 4.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-22902 | Critical | 9.8 | 2024-02-02 | Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials. |
CVE-2024-22901 | Critical | 9.8 | 2024-02-02 | Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials. |
CVE-2023-45499 | Critical | 9.8 | 2023-10-27 | VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials. |
CVE-2023-45498 | Critical | 9.8 | 2023-10-27 | VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability. |
CVE-2022-35866 | Critical | 9.8 | 2022-08-03 | This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not… |
CVE-2024-25228 | High | 8.8 | 2024-03-14 | Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler… |
CVE-2024-22903 | High | 8.8 | 2024-02-02 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK function. |
CVE-2024-22900 | High | 8.8 | 2024-02-02 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardInfo function. |
CVE-2024-22899 | High | 8.8 | 2024-02-02 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime function. |