CVE-2024-22902

Summary

CVE-2024-22902: A vulnerability has been identified in the Vinchin Backup & Recovery v7.2 software. The issue lies in the default configuration of the software, which sets root credentials without modification during installation. Hackers can exploit this vulnerability to gain unauthorized access and potentially take control of affected systems. Users are advised to update their software and modify default credentials immediately to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.