Hardcoded Credential Vulnerability in VinChin Backup & Recovery

CVE-2023-45499

What is CVE-2023-45499?

VinChin Backup & Recovery versions 5.0., 6.0., 6.7., and 7.0. have been identified to contain hardcoded credentials, posing a significant security risk. This flaw allows unauthorized users to gain access to sensitive system functionalities. The presence of hardcoded credentials can lead to potential remote code execution and exploitation of the system by malicious actors. It is crucial for users of affected versions to address this vulnerability promptly to ensure the security and integrity of their backup solutions.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2023-45499
Created by Rapid7

References