Description
Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Acronis | Acronis Cyber Infrastructure | unspecified – < 5.0.1-61, unspecified – < 5.1.1-71, unspecified – < 5.2.1-69, unspecified – < 5.3.1-53, unspecified – < 5.4.4-132 | 5.0.1-61 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
Acronis Cyber Infrastructure default password remote code execution
exploit/linux/http/acronis_cyber_infra_cve_2023_45249
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Acronis Cyber Infrastructure - Default Password javascript/cves/2023/CVE-2023-45249.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.