CVE-2023-45249—Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

漏洞名称

Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability

描述

Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

其他说明

• https://security-advisory.acronis.com/advisories/SEC-6452
• https://nvd.nist.gov/vuln/detail/CVE-2023-45249

相关新闻文章

• Critical Flaw in Acronis Cyber Infrastructure Exploited in the WildJuly 29, 2024
• Critical Acronis Cyber Infrastructure vulnerability exploited in the wild (CVE-2023-45249)July 29, 2024
• Acronis warns of Cyber Infrastructure default password abused in attacksJuly 26, 2024

相关 CWE

• CWE-1393