Critical severity · published Aug 3, 2022
CVE-2022-35866
This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561
9.8
CVSS
4.7%
EPSS
No
On KEV
Description
This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the MySQL server. The server uses a hard-coded password for the administrator user. An attacker can leverage this vulnerability to bypass authentication on the system. Was ZDI-CAN-17139.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)4.7% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Backup and Recovery · Vinchin
6.5.0.17561 · source: vendor
VB
Vinchin Backup And Recovery · Vinchin
6.5.0.17561 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-35866
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-35866
packetstormsecurity.com
http://packetstormsecurity.com/files/176794/Vinchin-Backup-And-Recovery-7.2-Default-MySQL-Credentials.html
seclists.org
http://seclists.org/fulldisclosure/2024/Jan/30
Third Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-22-959/