İçeriğe atla
Noroxi

Vinchin kayıtları

vinchin üreticisine ait 9 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
2 · %22,2
Pre-auth RCE
1
Düzeltme kaydı olan
%0
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

  1. 22
  2. 23
  3. 24

Çubuk: toplam · koyu kısım: CISA KEV.

Tekrar eden sınıflar

Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

CWE

Saldırı profili

Tüm kayıtlar

9 kayıt
  • CVE-2023-45498
    60Bu hafta

    VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain a command injection vulnerability.

    KritikCVSS 9,8SilahlaştırılmışEPSS %21

    vinchin · vinchin backup and recovery27 Eki 2023

  • CVE-2023-45499
    60Bu hafta

    VinChin Backup & Recovery v5.0.*, v6.0.*, v6.7.*, and v7.0.* was discovered to contain hardcoded credentials.

    KritikCVSS 9,8SilahlaştırılmışEPSS %8

    vinchin · vinchin backup and recovery27 Eki 2023

  • CVE-2024-25228
    43Planlayın

    Vinchin Backup and Recovery 7.2 and Earlier is vulnerable to Authenticated Remote Code Execution (RCE) via the getVerifydiyResult function i

    YüksekCVSS 8,8İstismar yokEPSS %25

    vinchin · vinchin backup and recovery13 Mar 2024

  • CVE-2022-35866
    40Planlayın

    This vulnerability allows remote attackers to bypass authentication on affected installations of Vinchin Backup and Recovery 6.5.0.17561.

    KritikCVSS 9,8İstismar yokEPSS %4

    vinchin · vinchin backup and recovery3 Ağu 2022

  • CVE-2024-22901
    39İzleyin

    Vinchin Backup & Recovery v7.2 was discovered to use default MYSQL credentials.

    KritikCVSS 9,8İstismar yokEPSS %1

    vinchin · vinchin backup and recovery1 Şub 2024

  • CVE-2024-22902
    39İzleyin

    Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.

    KritikCVSS 9,8İstismar yokEPSS %1

    vinchin · vinchin backup and recovery1 Şub 2024

  • CVE-2024-22899
    36İzleyin

    Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the syncNtpTime func

    YüksekCVSS 8,8Kavram kanıtıEPSS %2

    vinchin · vinchin backup and recovery1 Şub 2024

  • CVE-2024-22900
    36İzleyin

    Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the setNetworkCardIn

    YüksekCVSS 8,8İstismar yokEPSS %1

    vinchin · vinchin backup and recovery1 Şub 2024

  • CVE-2024-22903
    36İzleyin

    Vinchin Backup & Recovery v7.2 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the deleteUpdateAPK

    YüksekCVSS 8,8İstismar yokEPSS %1

    vinchin · vinchin backup and recovery1 Şub 2024