Acronis Cyber Infrastructure - Default Password
Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, 5.1.1-71, 5.2.1-69, 5.3.1-53, and 5.4.4-132 contain a remote command execution caused by use of default passwords, letting attackers execute arbitrary commands remotely, exploit requires access to the system with default credentials. References: https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/acronis_cyber_infra_cve_2023_45249.rb https://security-advisory.acronis.com/advisories/SEC-6452 https://security-advisory.acronis.com/updates/UPD-2310-9e7e-bd9b https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/ Remediation: Change default passwords and update to the latest version.
10 assets checked · domain, subdomain, ipv4