Free Edition| Vulnerability Details | |
| Severity | Low |
| CVE ID | CVE-2023-48646 |
| Affected software versions | 6062 and below |
| Fixed version | 6070 |
| Fixed on | June 30, 2023 |
RecoveryManager Plus builds 6062 and older were reported to have an authenticated remote code execution vulnerability. This has been fixed in the build 6070; its release notes can be found here.
An authenticated user with admin privileges can remotely execute codes on the machine where RecoveryManager Plus is installed through proxy settings.
Update your RecoveryManager Plus instance to 6070 using the service pack.
This vulnerability was discovered by hir0ot working with Trend Micro Zero Day Initiative.
