VB
Product
Vinchin Backup And Recovery
9
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 4Medium 0Low 0
Watch
Add Vinchin Backup And Recovery to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2024-22902 | 9.8 | Feb 2 | Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials Affected: through 7.2 |
| CVE-2024-22901 | 9.8 | Feb 2 | Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials Affected: through 7.2 |
| CVE-2023-45499 | 9.8 | Oct 27 | VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials Affected: 5.0 through 7.0 |
| CVE-2023-45498 | 9.8 | Oct 27 | VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability Affected: 5.0 through 7.0 |
| CVE-2022-35866 | 9.8 | Aug 3 | This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561 Affected: 6.5.0.17561 |
| CVE-2024-25228 | 8.8 | Mar 14 | Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php Affected: through 7.2 |
| CVE-2024-22903 | 8.8 | Feb 2 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK function Affected: through 7.2 |
| CVE-2024-22900 | 8.8 | Feb 2 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardInfo function Affected: through 7.2 |
| CVE-2024-22899 | 8.8 | Feb 2 | Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime function Affected: through 7.2 |
Showing 9