AOMEI Cyber Backup Missing Authentication for Critical Function Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in AOMEI Cyber Backup. This issue arises from a lack of authentication in the StorageNode service, which by default listens on TCP port 9075. The vulnerability allows remote attackers to execute arbitrary code on the affected system with SYSTEM privileges.

Impact

Exploitation of this vulnerability allows for arbitrary code execution on the affected system, with the executed code running in the context of the SYSTEM user.

Remediation

Given the nature of this vulnerability, the recommended mitigation strategy is to restrict interaction with the product.