cve/2023/CVE-2023-45499.md

CVE-2023-45499

Description

VinChin Backup & Recovery v5.0., v6.0., v6.7., and v7.0. was discovered to contain hardcoded credentials.

POC

Reference

• http://packetstormsecurity.com/files/175397/VinChin-VMWare-Backup-7.0-Hardcoded-Credential-Remote-Code-Execution.html
• http://packetstormsecurity.com/files/176289/Vinchin-Backup-And-Recovery-Command-Injection.html
• http://seclists.org/fulldisclosure/2023/Oct/31
• https://blog.leakix.net/2023/10/vinchin-backup-rce-chain/

Github

• https://github.com/Chocapikk/Chocapikk