CVE-2023-45249

CriticalKnown Exploited

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before…

Acronis·CWE-1393·Published 2024-07-24

CVSS

9.8

EPSS

0.54

KEV

Yes

Exploits

cve.orgen

385 chars

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.

NVDen

385 chars

NVDes

474 chars

Ejecución remota de comandos debido al uso de contraseñas predeterminadas. Los siguientes productos se ven afectados: Acronis Cyber Infrastructure (ACI) anterior a la compilación 5.0.1-61, Acronis Cyber Infrastructure (ACI) anterior a la compilación 5.1.1-71, Acronis Cyber Infrastructure (ACI) anterior a la compilación 5.2.1-69, Acronis Cyber Infraestructura (ACI) anterior a la compilación 5.3.1-53, Acronis Cyber Infrastructure (ACI) anterior a la compilación 5.4.4-132.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	9.8	—	—	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.0	Secondary	NVD	9.8	3.9	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
3.1	Primary	NVD	9.8	3.9	5.9	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H