CVE-2023-45498

Mô tả

Tham khảo

• packetstormsecurity.com/files/175397/VinChin-VMWare-Backup-7.0-Hardcoded-Credential-Remote-Code-Execution.html · Third Party Advisory
• packetstormsecurity.com/files/176289/Vinchin-Backup-And-Recovery-Command-Injection.html
• seclists.org/fulldisclosure/2023/Oct/31 · Mailing List
• blog.leakix.net/2023/10/vinchin-backup-rce-chain · Exploit

Lỗ hổng khác của vinchin backup and recovery

• CVE-2024-25228CAO 8.8Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function i…
• CVE-2024-22903CAO 8.8Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK …
• CVE-2024-22902NGHIÊM TRỌNG 9.8Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.
• CVE-2024-22901NGHIÊM TRỌNG 9.8Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.
• CVE-2024-22900CAO 8.8Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardIn…