CVE-2023-45249
CRITICAL KEV NUCLEIAcronis Cyber Infrastructure <5.0.1-61, <5.1.1-71, <5.2.1-69, <5.3....
Title source: llmExploitation Summary
CVE-2023-45249 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added July 29, 2024.
EIP tracks 1 public exploit, including a Metasploit module exploits/linux/http/acronis_cyber_infra_cve_2023_45249.
A Nuclei detection template is also available.
AI-analyzed exploit summary This Metasploit module exploits a default password vulnerability in Acronis Cyber Infrastructure to gain administrative access via PostgreSQL manipulation and SSH key injection. It leverages default credentials to add an admin user and establish an SSH session.
Description
Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132.
Exploits (1)
This Metasploit module exploits a default password vulnerability in Acronis Cyber Infrastructure to gain administrative access via PostgreSQL manipulation and SSH key injection. It leverages default credentials to add an admin user and establish an SSH session.
Nuclei Templates (1)
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H