CVE-2023-45249

🔥 Known Exploited (CISA KEV)CRITICAL

9.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-07-24

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.

Affected Platforms (CPE)

📦

Acronis

Cyber Infrastructure

< 5.0.1-61>= 5.1.1 and < 5.1.1-71>= 5.2.1 and < 5.2.1-69>= 5.3.1 and < 5.3.1-53>= 5.4.4 and < 5.4.4-132

References & Advisories

🔗 https://security-advisory.acronis.com/advisories/SEC-6452

🔗 https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/