Threats tagged 'ghsa-5ppc-gr6c-jgcj'

Vinchin Backup & Recovery version 7.2 contains an authenticated remote code execution vulnerability via the setNetworkCardInfo function. This flaw allows an authenticated attacker to execute arbitrary code remotely, potentially leading to full system compromise. The vulnerability has a high severity with a CVSS score of 8.8, indicating significant impact on confidentiality, integrity, and availability. No specific affected versions beyond v7.2 are stated, and no patch information is provided.