Skip to main content
The Website Services team at NHS England are testing early designs to understand how you find information. Your views will help us check our ideas work. Sign up to take part in our user research.

Exploitation of Vulnerability CVE-2023-45249 in Acronis Cyber Infrastructure

Critical vulnerability in Acronis Cyber Infrastructure (ACI) could be exploited to achieve remote code execution

Threat ID:
CC-4532
Threat Severity:
Medium
Published:
29 July 2024 4:17 PM
Report a cyber attack: call 0300 303 5222 or email [email protected]

Summary

Critical vulnerability in Acronis Cyber Infrastructure (ACI) could be exploited to achieve remote code execution

Threat details

Exploitation for CVE-2023-45249 in the wild

Acronis reports that the critical vulnerability CVE-2023-45249 is being exploited.

Introduction

Acronis has released an update for a critical vulnerability in multiple Acronis Cyber Infrastructure (ACI) build versions. Acronis ACI is a multi-tenant, hyper-converged infrastructure solution for cyber protection.

The vulnerability is tracked as CVE-2023-45249 and has a CVSS3 score of 9.8. A remote attacker could exploit this default password vulnerability to achieve remote code execution (RCE).

Remediation advice

Affected organisations are encouraged to review Acronis Security Advisory SEC-6452 and apply any relevant updates.

Last edited: 29 July 2024 4:17 pm