{"cvss":9.8,"datePublished":"2024-07-29","dateUpdated":"2024-07-29","description":"Acronis Cyber Infrastructure (ACI) allows an unauthenticated user to execute commands remotely due to the use of default passwords.","dueDate":"2024-08-19","id":"CVE-2023-45249","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://security-advisory.acronis.com/advisories/SEC-6452;  https://nvd.nist.gov/vuln/detail/CVE-2023-45249","product":"Cyber Infrastructure (ACI)","requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","severity":"CRITICAL","source":"cisa_known_exploited","title":"Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability","vendor":"Acronis"}