Read the docs
TI-2023-24253 Aliases CVE-2023-45249GHSA-rjfq-p48j-h96h

Remote command execution due to use of default passwords.

Priority CRITICAL 100Exploited in the wildCWE-1393Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.

Why it matters now

Exploitation Active In CISA KEV since 2024-07-29CISA due date 2024-08-19
EPSS 0.53535 98th percentileScored 2026-11-07
Fix Fixed Acronis Cyber Infrastructure (Acronis): 5.0.1-61, 5.1.1-71, 5.2.1-69 +2

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Active
Automatable
Yes
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
AcronisAcronis Cyber Infrastructurebefore 5.0.1-615.0.1-61Patch availableCNA
AcronisAcronis Cyber Infrastructurebefore 5.1.1-715.1.1-71Patch availableCNA
AcronisAcronis Cyber Infrastructurebefore 5.2.1-695.2.1-69Patch availableCNA
AcronisAcronis Cyber Infrastructurebefore 5.3.1-535.3.1-53Patch availableCNA
AcronisAcronis Cyber Infrastructurebefore 5.4.4-1325.4.4-132Patch availableCNA
  • Acronis Cyber Infrastructure VendorAcronis Affected before 5.0.1-61 Fixed in 5.0.1-61 Patch available CNA
  • Acronis Cyber Infrastructure VendorAcronis Affected before 5.1.1-71 Fixed in 5.1.1-71 Patch available CNA
  • Acronis Cyber Infrastructure VendorAcronis Affected before 5.2.1-69 Fixed in 5.2.1-69 Patch available CNA
  • Acronis Cyber Infrastructure VendorAcronis Affected before 5.3.1-53 Fixed in 5.3.1-53 Patch available CNA
  • Acronis Cyber Infrastructure VendorAcronis Affected before 5.4.4-132 Fixed in 5.4.4-132 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*before 5.0.1-61; 5.1.1 to before 5.1.1-71; 5.2.1 to before 5.2.1-69; 5.3.1 to before 5.3.1-53; 5.4.4 to before 5.4.4-132VulnerableAcronis
  • cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:* Versions before 5.0.1-61; 5.1.1 to before 5.1.1-71; 5.2.1 to before 5.2.1-69; 5.3.1 to before 5.3.1-53; 5.4.4 to before 5.4.4-132 Vulnerable ·Acronis

Remediation

  • Fix · CNA Acronis Cyber Infrastructure (Acronis) Fixed in 5.0.1-61
  • Fix · CNA Acronis Cyber Infrastructure (Acronis) Fixed in 5.1.1-71
  • Fix · CNA Acronis Cyber Infrastructure (Acronis) Fixed in 5.2.1-69
  • Fix · CNA Acronis Cyber Infrastructure (Acronis) Fixed in 5.3.1-53
  • Fix · CNA Acronis Cyber Infrastructure (Acronis) Fixed in 5.4.4-132

Timeline

  1. 2024-07-29 Added to CISA KEV
  2. 2026-10-02 Threatist record created from CVE-2023-45249
  3. 2026-10-03 Alias added: GHSA-rjfq-p48j-h96h

References

Advisory 2

Other 1

  • TI-2023-02215 Sensitive information disclosure due to CORS misconfiguration. CVSS 3.1HIGH 7.5
  • TI-2023-02605 Improper authorization in Acronis Cyber Infrastructure CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences