PT-2023-8529 · Vinchin · Vinchin Backup & Recovery

Gregory Boddin

·

Published

2023-10-25

·

Updated

2023-12-29

·

CVE-2023-45499

CVSS v2.0

10

Critical

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions VinChin Backup & Recovery versions 5.0.* through 7.0.*
Description The issue is related to hardcoded credentials in the software. This could allow a remote attacker to impact the confidentiality, integrity, and availability of protected information.
Recommendations For versions 5.0.* through 7.0.*, consider changing the hardcoded credentials to unique, secure credentials as a temporary workaround until a patch is available. Restrict access to the software to minimize the risk of exploitation. Avoid using the software for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2024-01117
CVE-2023-45499

Affected Products

Vinchin Backup & Recovery