CVE-2024-25228
Published Mar 14, 2024Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.
Vendor archive
vinchin CVEs
Beta · best-effort9 CVEs tagged to vendor vinchin — 5 Critical, 4 High, 0 Medium, 0 Low, 0 Unrated.
CVE-2024-22903
Published Feb 2, 2024Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK function.
- Buzz score
- 6.8
CVE-2024-22902
Published Feb 2, 2024Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.
- Buzz score
- 6.8
Public PoC observed
CVE-2024-22901
Published Feb 2, 2024Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.
- Buzz score
- 6.8
Public PoC observed
CVE-2024-22900
Published Feb 2, 2024Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardInfo function.
- Buzz score
- 6.8
CVE-2024-22899
Published Feb 2, 2024Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime function.
- Buzz score
- 6.8
CVE-2023-45499
Published Oct 27, 2023VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials.
CVE-2023-45498
Published Oct 27, 2023VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability.
CVE-2022-35866
Published Aug 3, 2022This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not required to exploit…
Showing 1-9 of 9 CVEsPage 1 of 1