CVE-2024-22902 - Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials

CRITICAL

Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials

Published Feb 2, 2024

9.8

CRITICAL

CVSS 3.1

EPSS 1.08%

Vinchin Backup & Recovery v7.2 was discovered to be configured with default root credentials.

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

Link	Providers	Tags
http://packetstormsecurity.com/files/176795/Vinchin-Backup-And-Recovery-7.2-Default-Root-Credentials.html
http://seclists.org/fulldisclosure/2024/Jan/31
https://blog.leakix.net/2024/01/vinchin-backup-rce-chain/		ExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-20427		Advisory
https://seclists.org/fulldisclosure/2024/Jan/31		Mailing ListThird Party Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Feb 2, 2024

Updated Jul 9, 2026

Reserved Jan 11, 2024

CISA Vulnrichment

Updated May 9, 2025

NVD

Status Modified

Modified Jul 9, 2026

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Feb 2, 2024

Updated Jul 9, 2026

GitHub

No data