Gu Yongzeng

An External Control of File Name or Path issue allows a local user to execute arbitrary code with SYSTEM privileges. This is achieved by tampering with an Inter-Process Communication (IPC) message, which is a mechanism that allows different processes to communicate and synchronize their actions.

Name of the Vulnerable Software and Affected Versions: AOMEI Cyber Backup (affected versions not specified) Description: AOMEI Cyber Backup is affected by a missing authentication issue for a critical function, potentially leading to remote code execution. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: AOMEI Cyber Backup (affected versions not specified) Description: AOMEI Cyber Backup suffers from a missing authentication flaw for a critical function, potentially leading to remote code execution. Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.