Description
VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://blog.leakix.net/2023/10/vinchin-backup-rce-chain/ ↗
- http://seclists.org/fulldisclosure/2023/Oct/31 ↗
- http://packetstormsecurity.com/files/175397/VinChin-VMWare-Backup-7.0-Hardcoded-Credential-Remote-Code-Execution.html ↗
- http://packetstormsecurity.com/files/176289/Vinchin-Backup-And-Recovery-Command-Injection.html ↗