Cyber Infrastructure vulnerabilities

2 known vulnerabilities in Cyber Infrastructure from Acronis. 2 are rated high or critical, and 1 has been exploited in real attacks. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Acronis Cyber Infrastructure (ACI) Insecure Default Password Exploited

  CVE-2023-45249Jul 24, 2024AcronisEPSS 53.5%

  Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5

• 7.5 High severity

  Acronis Cyber Infrastructure: Permissive Cross-domain Security Policy with Untrusted Domains

  CVE-2023-2360Apr 28, 2023Acronis

  Sensitive information disclosure due to CORS misconfiguration. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.2.0-135.