{"history":[{"alert":0,"cve":"CVE-2023-45249","id":22487,"kind":"epss","observed_at":1794500401,"payload":"{\"date\": \"2026-11-12\", \"epss\": 0.53535, \"percentile\": 0.99007}"},{"alert":0,"cve":"CVE-2023-45249","id":20106,"kind":"epss","observed_at":1794327601,"payload":"{\"date\": \"2026-11-10\", \"epss\": 0.53535, \"percentile\": 0.99}"},{"alert":0,"cve":"CVE-2023-45249","id":18073,"kind":"epss","observed_at":1794241201,"payload":"{\"date\": \"2026-11-09\", \"epss\": 0.53535, \"percentile\": 0.98999}"},{"alert":0,"cve":"CVE-2023-45249","id":16137,"kind":"epss","observed_at":1794154800,"payload":"{\"date\": \"2026-11-08\", \"epss\": 0.53535, \"percentile\": 0.98998}"},{"alert":0,"cve":"CVE-2023-45249","id":14115,"kind":"epss","observed_at":1794068402,"payload":"{\"date\": \"2026-11-07\", \"epss\": 0.53535, \"percentile\": 0.98998}"},{"alert":0,"cve":"CVE-2023-45249","id":11897,"kind":"epss","observed_at":1793982001,"payload":"{\"date\": \"2026-11-06\", \"epss\": 0.53535, \"percentile\": 0.98997}"},{"alert":0,"cve":"CVE-2023-45249","id":9883,"kind":"epss","observed_at":1793938800,"payload":"{\"date\": \"2026-11-05\", \"epss\": 0.53535, \"percentile\": 0.98996}"},{"alert":0,"cve":"CVE-2023-45249","id":7431,"kind":"epss","observed_at":1793809200,"payload":"{\"date\": \"2026-11-04\", \"epss\": 0.53535, \"percentile\": 0.98995}"},{"alert":1,"cve":"CVE-2023-45249","id":6208,"kind":"cna","observed_at":1793809200,"payload":"{\"containers\": {\"adp\": [{\"affected\": [{\"cpes\": [\"cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unaffected\", \"product\": \"cyber_infrastructure\", \"vendor\": \"acronis\", \"versions\": [{\"lessThan\": \"5.0.1-61\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.1.1-71\", \"status\": \"affected\", \"version\": \"5.1.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.2.1-69\", \"status\": \"affected\", \"version\": \"5.2.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.3.1-53\", \"status\": \"affected\", \"version\": \"5.3.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.4.4-132\", \"status\": \"affected\", \"version\": \"5.4.4\", \"versionType\": \"semver\"}]}, {\"cpes\": [\"cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unaffected\", \"product\": \"cyber_infrastructure\", \"vendor\": \"acronis\", \"versions\": [{\"lessThan\": \"5.0.1-61\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.1.1-71\", \"status\": \"affected\", \"version\": \"5.1.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.2.1-69\", \"status\": \"affected\", \"version\": \"5.2.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.3.1-53\", \"status\": \"affected\", \"version\": \"5.3.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.4.4-132\", \"status\": \"affected\", \"version\": \"5.4.4\", \"versionType\": \"semver\"}]}, {\"cpes\": [\"cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unaffected\", \"product\": \"cyber_infrastructure\", \"vendor\": \"acronis\", \"versions\": [{\"lessThan\": \"5.0.1-61\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.1.1-71\", \"status\": \"affected\", \"version\": \"5.1.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.2.1-69\", \"status\": \"affected\", \"version\": \"5.2.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.3.1-53\", \"status\": \"affected\", \"version\": \"5.3.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.4.4-132\", \"status\": \"affected\", \"version\": \"5.4.4\", \"versionType\": \"semver\"}]}, {\"cpes\": [\"cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unaffected\", \"product\": \"cyber_infrastructure\", \"vendor\": \"acronis\", \"versions\": [{\"lessThan\": \"5.0.1-61\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.1.1-71\", \"status\": \"affected\", \"version\": \"5.1.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.2.1-69\", \"status\": \"affected\", \"version\": \"5.2.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.3.1-53\", \"status\": \"affected\", \"version\": \"5.3.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.4.4-132\", \"status\": \"affected\", \"version\": \"5.4.4\", \"versionType\": \"semver\"}]}, {\"cpes\": [\"cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*\"], \"defaultStatus\": \"unaffected\", \"product\": \"cyber_infrastructure\", \"vendor\": \"acronis\", \"versions\": [{\"lessThan\": \"5.0.1-61\", \"status\": \"affected\", \"version\": \"0\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.1.1-71\", \"status\": \"affected\", \"version\": \"5.1.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.2.1-69\", \"status\": \"affected\", \"version\": \"5.2.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.3.1-53\", \"status\": \"affected\", \"version\": \"5.3.1\", \"versionType\": \"semver\"}, {\"lessThan\": \"5.4.4-132\", \"status\": \"affected\", \"version\": \"5.4.4\", \"versionType\": \"semver\"}]}], \"metrics\": [{\"other\": {\"content\": {\"id\": \"CVE-2023-45249\", \"options\": [{\"Exploitation\": \"active\"}, {\"Automatable\": \"yes\"}, {\"Technical Impact\": \"total\"}], \"role\": \"CISA Coordinator\", \"timestamp\": \"2024-08-22T03:55:10.296968Z\", \"version\": \"2.0.3\"}, \"type\": \"ssvc\"}}, {\"other\": {\"content\": {\"dateAdded\": \"2024-07-29\", \"reference\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45249\"}, \"type\": \"kev\"}}], \"providerMetadata\": {\"dateUpdated\": \"2025-10-21T22:55:49.110Z\", \"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\"}, \"references\": [{\"tags\": [\"government-resource\"], \"url\": \"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45249\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2024-07-29T00:00:00.000Z\", \"value\": \"CVE-2023-45249 added to CISA KEV\"}], \"title\": \"CISA ADP Vulnrichment\"}, {\"providerMetadata\": {\"dateUpdated\": \"2024-08-02T20:14:19.863Z\", \"orgId\": \"af854a3a-2127-422b-91ae-364da2661108\", \"shortName\": \"CVE\"}, \"references\": [{\"name\": \"SEC-6452\", \"tags\": [\"vendor-advisory\", \"x_transferred\"], \"url\": \"https://security-advisory.acronis.com/advisories/SEC-6452\"}, {\"tags\": [\"x_transferred\"], \"url\": \"https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/\"}], \"title\": \"CVE Program Container\"}], \"cna\": {\"affected\": [{\"defaultStatus\": \"unaffected\", \"platforms\": [\"ACI\"], \"product\": \"Acronis Cyber Infrastructure\", \"vendor\": \"Acronis\", \"versions\": [{\"lessThan\": \"5.0.1-61\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"semver\"}]}, {\"defaultStatus\": \"unaffected\", \"platforms\": [\"ACI\"], \"product\": \"Acronis Cyber Infrastructure\", \"vendor\": \"Acronis\", \"versions\": [{\"lessThan\": \"5.1.1-71\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"semver\"}]}, {\"defaultStatus\": \"unaffected\", \"platforms\": [\"ACI\"], \"product\": \"Acronis Cyber Infrastructure\", \"vendor\": \"Acronis\", \"versions\": [{\"lessThan\": \"5.2.1-69\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"semver\"}]}, {\"defaultStatus\": \"unaffected\", \"platforms\": [\"ACI\"], \"product\": \"Acronis Cyber Infrastructure\", \"vendor\": \"Acronis\", \"versions\": [{\"lessThan\": \"5.3.1-53\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"semver\"}]}, {\"defaultStatus\": \"unaffected\", \"platforms\": [\"ACI\"], \"product\": \"Acronis Cyber Infrastructure\", \"vendor\": \"Acronis\", \"versions\": [{\"lessThan\": \"5.4.4-132\", \"status\": \"affected\", \"version\": \"unspecified\", \"versionType\": \"semver\"}]}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.\"}], \"metrics\": [{\"cvssV3_0\": {\"baseScore\": 9.8, \"baseSeverity\": \"CRITICAL\", \"vectorString\": \"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\", \"version\": \"3.0\"}, \"format\": \"CVSS\", \"scenarios\": [{\"lang\": \"en\", \"value\": \"GENERAL\"}]}], \"problemTypes\": [{\"descriptions\": [{\"cweId\": \"CWE-1393\", \"description\": \"CWE-1393\", \"lang\": \"en\", \"type\": \"CWE\"}]}], \"providerMetadata\": {\"dateUpdated\": \"2024-07-29T22:26:15.624Z\", \"orgId\": \"73dc0fef-1c66-4a72-9d2d-0a0f4012c175\", \"shortName\": \"Acronis\"}, \"references\": [{\"name\": \"SEC-6452\", \"tags\": [\"vendor-advisory\"], \"url\": \"https://security-advisory.acronis.com/advisories/SEC-6452\"}, {\"url\": \"https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/\"}]}}, \"cveMetadata\": {\"assignerOrgId\": \"73dc0fef-1c66-4a72-9d2d-0a0f4012c175\", \"assignerShortName\": \"Acronis\", \"cveId\": \"CVE-2023-45249\", \"datePublished\": \"2024-07-24T14:03:56.481Z\", \"dateReserved\": \"2023-10-05T21:47:00.379Z\", \"dateUpdated\": \"2025-10-21T22:55:49.110Z\", \"state\": \"PUBLISHED\"}, \"dataType\": \"CVE_RECORD\", \"dataVersion\": \"5.1\"}"},{"alert":0,"cve":"CVE-2023-45249","id":5208,"kind":"epss","observed_at":1793722800,"payload":"{\"date\": \"2026-11-03\", \"epss\": 0.53535, \"percentile\": 0.98994}"},{"alert":0,"cve":"CVE-2023-45249","id":2990,"kind":"epss","observed_at":1793665375,"payload":"{\"date\": \"2026-11-02\", \"epss\": 0.53535, \"percentile\": 0.98993}"},{"alert":1,"cve":"CVE-2023-45249","id":628,"kind":"kev","observed_at":1793665375,"payload":"{\"cveID\": \"CVE-2023-45249\", \"cwes\": [\"CWE-1393\"], \"dateAdded\": \"2024-07-29\", \"dueDate\": \"2024-08-19\", \"forensicTriage\": \"No\", \"knownRansomwareCampaignUse\": \"Unknown\", \"notes\": \"https://security-advisory.acronis.com/advisories/SEC-6452;  https://nvd.nist.gov/vuln/detail/CVE-2023-45249\", \"product\": \"Cyber Infrastructure (ACI)\", \"requiredAction\": \"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.\", \"shortDescription\": \"Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.\", \"vendorProject\": \"Acronis\", \"vulnerabilityName\": \"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability\"}"}],"record":{"affected":[{"defaultStatus":"unaffected","platforms":["ACI"],"product":"Acronis Cyber Infrastructure","vendor":"Acronis","versions":[{"lessThan":"5.0.1-61","status":"affected","version":"unspecified","versionType":"semver"}]},{"defaultStatus":"unaffected","platforms":["ACI"],"product":"Acronis Cyber Infrastructure","vendor":"Acronis","versions":[{"lessThan":"5.1.1-71","status":"affected","version":"unspecified","versionType":"semver"}]},{"defaultStatus":"unaffected","platforms":["ACI"],"product":"Acronis Cyber Infrastructure","vendor":"Acronis","versions":[{"lessThan":"5.2.1-69","status":"affected","version":"unspecified","versionType":"semver"}]},{"defaultStatus":"unaffected","platforms":["ACI"],"product":"Acronis Cyber Infrastructure","vendor":"Acronis","versions":[{"lessThan":"5.3.1-53","status":"affected","version":"unspecified","versionType":"semver"}]},{"defaultStatus":"unaffected","platforms":["ACI"],"product":"Acronis Cyber Infrastructure","vendor":"Acronis","versions":[{"lessThan":"5.4.4-132","status":"affected","version":"unspecified","versionType":"semver"}]}],"cna":{"containers":{"adp":[{"affected":[{"cpes":["cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"cyber_infrastructure","vendor":"acronis","versions":[{"lessThan":"5.0.1-61","status":"affected","version":"0","versionType":"semver"},{"lessThan":"5.1.1-71","status":"affected","version":"5.1.1","versionType":"semver"},{"lessThan":"5.2.1-69","status":"affected","version":"5.2.1","versionType":"semver"},{"lessThan":"5.3.1-53","status":"affected","version":"5.3.1","versionType":"semver"},{"lessThan":"5.4.4-132","status":"affected","version":"5.4.4","versionType":"semver"}]},{"cpes":["cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"cyber_infrastructure","vendor":"acronis","versions":[{"lessThan":"5.0.1-61","status":"affected","version":"0","versionType":"semver"},{"lessThan":"5.1.1-71","status":"affected","version":"5.1.1","versionType":"semver"},{"lessThan":"5.2.1-69","status":"affected","version":"5.2.1","versionType":"semver"},{"lessThan":"5.3.1-53","status":"affected","version":"5.3.1","versionType":"semver"},{"lessThan":"5.4.4-132","status":"affected","version":"5.4.4","versionType":"semver"}]},{"cpes":["cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"cyber_infrastructure","vendor":"acronis","versions":[{"lessThan":"5.0.1-61","status":"affected","version":"0","versionType":"semver"},{"lessThan":"5.1.1-71","status":"affected","version":"5.1.1","versionType":"semver"},{"lessThan":"5.2.1-69","status":"affected","version":"5.2.1","versionType":"semver"},{"lessThan":"5.3.1-53","status":"affected","version":"5.3.1","versionType":"semver"},{"lessThan":"5.4.4-132","status":"affected","version":"5.4.4","versionType":"semver"}]},{"cpes":["cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"cyber_infrastructure","vendor":"acronis","versions":[{"lessThan":"5.0.1-61","status":"affected","version":"0","versionType":"semver"},{"lessThan":"5.1.1-71","status":"affected","version":"5.1.1","versionType":"semver"},{"lessThan":"5.2.1-69","status":"affected","version":"5.2.1","versionType":"semver"},{"lessThan":"5.3.1-53","status":"affected","version":"5.3.1","versionType":"semver"},{"lessThan":"5.4.4-132","status":"affected","version":"5.4.4","versionType":"semver"}]},{"cpes":["cpe:2.3:a:acronis:cyber_infrastructure:*:*:*:*:*:*:*:*"],"defaultStatus":"unaffected","product":"cyber_infrastructure","vendor":"acronis","versions":[{"lessThan":"5.0.1-61","status":"affected","version":"0","versionType":"semver"},{"lessThan":"5.1.1-71","status":"affected","version":"5.1.1","versionType":"semver"},{"lessThan":"5.2.1-69","status":"affected","version":"5.2.1","versionType":"semver"},{"lessThan":"5.3.1-53","status":"affected","version":"5.3.1","versionType":"semver"},{"lessThan":"5.4.4-132","status":"affected","version":"5.4.4","versionType":"semver"}]}],"metrics":[{"other":{"content":{"id":"CVE-2023-45249","options":[{"Exploitation":"active"},{"Automatable":"yes"},{"Technical Impact":"total"}],"role":"CISA Coordinator","timestamp":"2024-08-22T03:55:10.296968Z","version":"2.0.3"},"type":"ssvc"}},{"other":{"content":{"dateAdded":"2024-07-29","reference":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45249"},"type":"kev"}}],"providerMetadata":{"dateUpdated":"2025-10-21T22:55:49.110Z","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","shortName":"CISA-ADP"},"references":[{"tags":["government-resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45249"}],"timeline":[{"lang":"en","time":"2024-07-29T00:00:00.000Z","value":"CVE-2023-45249 added to CISA KEV"}],"title":"CISA ADP Vulnrichment"},{"providerMetadata":{"dateUpdated":"2024-08-02T20:14:19.863Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"SEC-6452","tags":["vendor-advisory","x_transferred"],"url":"https://security-advisory.acronis.com/advisories/SEC-6452"},{"tags":["x_transferred"],"url":"https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/"}],"title":"CVE Program Container"}],"cna":{"affected":[{"defaultStatus":"unaffected","platforms":["ACI"],"product":"Acronis Cyber Infrastructure","vendor":"Acronis","versions":[{"lessThan":"5.0.1-61","status":"affected","version":"unspecified","versionType":"semver"}]},{"defaultStatus":"unaffected","platforms":["ACI"],"product":"Acronis Cyber Infrastructure","vendor":"Acronis","versions":[{"lessThan":"5.1.1-71","status":"affected","version":"unspecified","versionType":"semver"}]},{"defaultStatus":"unaffected","platforms":["ACI"],"product":"Acronis Cyber Infrastructure","vendor":"Acronis","versions":[{"lessThan":"5.2.1-69","status":"affected","version":"unspecified","versionType":"semver"}]},{"defaultStatus":"unaffected","platforms":["ACI"],"product":"Acronis Cyber Infrastructure","vendor":"Acronis","versions":[{"lessThan":"5.3.1-53","status":"affected","version":"unspecified","versionType":"semver"}]},{"defaultStatus":"unaffected","platforms":["ACI"],"product":"Acronis Cyber Infrastructure","vendor":"Acronis","versions":[{"lessThan":"5.4.4-132","status":"affected","version":"unspecified","versionType":"semver"}]}],"descriptions":[{"lang":"en","value":"Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132."}],"metrics":[{"cvssV3_0":{"baseScore":9.8,"baseSeverity":"CRITICAL","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-1393","description":"CWE-1393","lang":"en","type":"CWE"}]}],"providerMetadata":{"dateUpdated":"2024-07-29T22:26:15.624Z","orgId":"73dc0fef-1c66-4a72-9d2d-0a0f4012c175","shortName":"Acronis"},"references":[{"name":"SEC-6452","tags":["vendor-advisory"],"url":"https://security-advisory.acronis.com/advisories/SEC-6452"},{"url":"https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/"}]}},"cveMetadata":{"assignerOrgId":"73dc0fef-1c66-4a72-9d2d-0a0f4012c175","assignerShortName":"Acronis","cveId":"CVE-2023-45249","datePublished":"2024-07-24T14:03:56.481Z","dateReserved":"2023-10-05T21:47:00.379Z","dateUpdated":"2025-10-21T22:55:49.110Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"cna_checked":1794241201,"cve":"CVE-2023-45249","description":"Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.","epss":{"date":"2026-11-12","epss":0.53535,"percentile":0.99007},"epss_checked":1794522003,"first_seen":1793665375,"kev":{"cveID":"CVE-2023-45249","cwes":["CWE-1393"],"dateAdded":"2024-07-29","dueDate":"2024-08-19","forensicTriage":"No","knownRansomwareCampaignUse":"Unknown","notes":"https://security-advisory.acronis.com/advisories/SEC-6452;  https://nvd.nist.gov/vuln/detail/CVE-2023-45249","product":"Cyber Infrastructure (ACI)","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","shortDescription":"Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.","vendorProject":"Acronis","vulnerabilityName":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability"},"kev_checked":1794522003,"products":"Acronis Acronis Cyber Infrastructure","references":["https://security-advisory.acronis.com/advisories/SEC-6452","https://www.securityweek.com/acronis-product-vulnerability-exploited-in-the-wild/","https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-45249"],"score":{"baseScore":9.8,"baseSeverity":"CRITICAL","provider":"Acronis","vectorString":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.0"},"solutions":"","state":"PUBLISHED","title":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","updated_at":1794500401,"workarounds":""},"sources":[]}