CVE-2024-22900

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the setNetworkCardInfo function...

The vulnerability of the setNetworkCardInfo() function in the Vinchin Backup & Recovery software allows a hacker to execute arbitrary commands.

The vulnerability of the setNetworkCardInfo function in the Vinchin Backup & Recovery software relates to the lack of measures taken to neutralize special elements used in the operating system’s command when processing the NAME parameter. Exploiting this vulnerability allows a malicious actor to...

CVE-2024-22900

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the setNetworkCardInfo function...

CVE-2024-22900

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the setNetworkCardInfo function...

CVE-2024-22900

Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution RCE vulnerability via the setNetworkCardInfo function...

Vinchin Backup And Recovery 7.2 setNetworkCardInfo Command Injection

CVE ID: CVE-2024-22900 Title: Command Injection Vulnerability in Vinchin Backup and Recovery Versions 7.2 and Earlier Description: A critical security vulnerability, identified as CVE-2024-22900, has been discovered in Vinchin Backup and Recovery software, affecting versions 7.2 and earlier. The...

PT-2024-1551 · Vinchin · Vinchin Backup & Recovery

Name of the Vulnerable Software and Affected Versions: Vinchin Backup & Recovery versions 7.2 and earlier Description: The issue is related to the setNetworkCardInfo function in Vinchin Backup & Recovery, which does not properly neutralize special elements used in the operating system command whe...