Vinchin Backup And Recovery vulnerabilities

3 known vulnerabilities in Vinchin Backup And Recovery from Vinchin. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  vinchin_backup_and_recovery: Improper Neutralization of Special Elements used in a Command

  CVE-2024-25228Mar 14, 2024VinchinEPSS 25.9%

  Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function in ManoeuvreHandler.class.php.

• 8.8 High severity

  Vinchin Backup And Recovery: Improper Neutralization of Special Elements used in a Command

  CVE-2024-22900Feb 2, 2024VinchinEPSS 1.9%

  Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardInfo function.

• 9.8 Critical severity

  Backup and Recovery: Use of Hard-coded Credentials

  CVE-2022-35866Aug 3, 2022VinchinEPSS 4.68%

  This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561. Authentication is not required to exploit this vulnerability. The specific flaw exists within the configuration of the MyS