CVE-2024-22900

Summary

CVE-2024-22900 is a newly disclosed vulnerability affecting the Vinchin Backup & Recovery v7.2 software. This issue permits authenticated remote code execution (RCE), which means an attacker with access credentials can exploit the setNetworkCardInfo function to inject and run malicious code on targeted systems. The impact of this vulnerability is significant as it can lead to unauthorized system takeover, data theft, or further spread of malware. System administrators are strongly advised to update their Vinchin Backup & Recovery installations to the latest version as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.