CVE-2023-45249
KEVAcronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability
View CVE record →- Vendor / Project
- Acronis
- Product
- Cyber Infrastructure (ACI)
- Date added
- Jul 29, 2024
- Due date
- Aug 19, 2024
- Known ransomware use
- Unknown
- CWEs
- CWE-1393
Description
Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.