Default credentials

Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials...

Remote code execution

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the setNetworkCardInfo function...

Default credentials

Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials...

Remote code execution

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the syncNtpTime function...

Remote code execution

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the deleteUpdateAPK function...

CVE-2024-22903

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the deleteUpdateAPK function...

CVE-2024-22901

Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials...

Vinchin Backup and Recovery Security Vulnerabilities

Vinchin Backup and Recovery is an easy-to-use, safe and reliable virtual machine data protection software from China Yunqi Technology Vinchin. It is used for backup and recovery. A security vulnerability exists in Vinchin Backup and Recovery version v7.2, which originates from configuring the...

CVE-2024-22899

Vinchin Backup & Recovery v7.2 (and earlier) has an authenticated remote code execution (RCE) vulnerability in the syncNtpTime function. The issue stems from the ntphost handling in SystemHandler.class.php, where user-controlled input can be injected into a system command, enabling arbitrary comm...

CVE-2024-22900

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the setNetworkCardInfo function...

CVE-2024-22903

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the deleteUpdateAPK function...

CVE-2024-22901

CVE-2024-22901 affects Vinchin Backup & Recovery v7.2 (and earlier) where default MySQL credentials are used. Public sources in connected documents confirm the underlying issue is default credentials enabling unauthenticated access, with CVSS 3.1 base score 9.8 (CRITICAL) and impact to confidenti...

CVE-2024-22902

CVE-2024-22902 : Vinchin Backup & Recovery v7.2 is reported to be configured with default root credentials, enabling potential unauthorized root access. The issue is described as a high-severity configuration flaw with a CVSS v3.1 base score of 9.8 (Network, low attack complexity, no user interac...

CVE-2024-22900

CVE-2024-22900 affects Vinchin Backup & Recovery (versions 7.2 and earlier). An authenticated attacker can trigger command injection via the setNetworkCardInfo(NAME) path, where user-supplied NAME is used in system commands, enabling remote code execution. Public writeups describe exploitation th...

CVE-2024-22899

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the syncNtpTime function...

CVE-2024-22903

CVE-2024-22903 affects Vinchin Backup & Recovery v7.2 and earlier. The vulnerability is an authenticated remote code execution via the deleteUpdateAPK function in SystemHandler.class.php, caused by improper handling/validation of the file_name input leading to command injection (exec). Impact is ...

Vinchin Backup and Recovery Security Vulnerabilities

Vinchin Backup and Recovery is an easy-to-use, safe and reliable virtual machine data protection software from China Yunqi Technology Vinchin. It is used for backup and recovery. A security vulnerability exists in Vinchin Backup and Recovery v7.2. An attacker can exploit the vulnerability to...

CVE-2024-22902

Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials...

CVE-2024-22902

Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials...

Vinchin Backup and Recovery Security Vulnerabilities

Vinchin Backup and Recovery is an easy-to-use, safe and reliable virtual machine data protection software from China Yunqi Technology Vinchin. It is used for backup and recovery. A security vulnerability exists in Vinchin Backup and Recovery v7.2. An attacker can exploit the vulnerability to...