CVE-2023-45249

· CRITICALAnalyzed

← All CVEs

CVSS v3.1

9.8

EPSS

53.25%

Published

Jul 24, 2024

Modified

Oct 22, 2025

CISA Known Exploited Vulnerability

Added: 2024-07-29 · Due: 2024-08-19

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-1393

Affected Products (5)

acronis · cyber_infrastructure (up to 5.0.1-61)vulnerable

acronis · cyber_infrastructure (up to 5.1.1-71)vulnerable

acronis · cyber_infrastructure (up to 5.2.1-69)vulnerable

acronis · cyber_infrastructure (up to 5.3.1-53)vulnerable

acronis · cyber_infrastructure (up to 5.4.4-132)vulnerable

References (5)

https://security-advisory.acronis.com/advisories/SEC-6452