Lucene search
HistoryOct 27, 2023 - 4:15 a.m.
CVE-2023-45498
vinchin
backup & recovery
cve-2023-45498
nvd
security vulnerability
command injection
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
69.5%
VinChin Backup & Recovery v5.0., v6.0., v6.7., and v7.0. was discovered to contain a command injection vulnerability.
Affected configurations
Node
vinchinvinchin_backup_and_recoveryRange5.0–7.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| vinchin:vinchin_backup_and_recovery | vinchin vinchin backup and recovery | le | 7.0 |
Related
nvd
nvd
CVE-2023-45498
2023-10-27 04:15:10
cvelist
cvelist
CVE-2023-45498
2023-10-27 00:00:00
prion
prion
Command injection
2023-10-27 04:15:00
zdt
zdt
Vinchin Backup And Recovery Command Injection Exploit
2023-12-21 00:00:00
packetstorm
packetstorm
Vinchin Backup And Recovery Command Injection
2023-12-21 00:00:00
rapid7blog
rapid7blog
Metasploit Weekly Wrap-Up
2023-12-22 16:32:56
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.003 Low
EPSS
Percentile
69.5%
Related for CVE-2023-45498