AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability

AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of AOMEI Cyber Backup. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DaoService service, which listens on TCP port 9074 by default. The issue results from the lack of authentication prior to allowing access to functionality. An attacker can leverage this vulnerability to execute code in the context of SYSTEM. Was ZDI-CAN-26158.

N/A

关键功能的认证机制缺失

AOMEI Cyber Backup 访问控制错误漏洞

AOMEI Cyber Backup是中国傲梅科技（AOMEI）公司的一个备份和还原软件。 AOMEI Cyber Backup存在访问控制错误漏洞，该漏洞源于关键功能缺少身份验证，可能导致远程代码执行。

N/A

N/A