Lucene search
HistoryOct 27, 2023 - 4:15 a.m.
CVE-2023-45499
vinchin
backup & recovery
cve-2023-45499
nvd
hardcoded credentials
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.4%
VinChin Backup & Recovery v5.0., v6.0., v6.7., and v7.0. was discovered to contain hardcoded credentials.
Affected configurations
Node
vinchinvinchin_backup_and_recoveryRange5.0–7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| vinchin:vinchin_backup_and_recovery | vinchin vinchin backup and recovery | le | 7.0 |
Related
cvelist
cvelist
CVE-2023-45499
2023-10-27 00:00:00
prion
prion
Hardcoded credentials
2023-10-27 04:15:00
nvd
nvd
CVE-2023-45499
2023-10-27 04:15:10
packetstorm
packetstorm
Vinchin Backup And Recovery Command Injection
2023-12-21 00:00:00
zdt
zdt
Vinchin Backup And Recovery Command Injection Exploit
2023-12-21 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-12-22 16:32:56
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
49.4%
Related for CVE-2023-45499