Detections
Analytics

Acronis Cyber Infrastructure 5.1.x < 5.1.1-71 / 5.2.x < 5.2.1-69 / 5.3.x < 5.3.1-53 / 5.4.x < 5.4.4-132 / < 5.0.1-61 (SEC-6452)

critical Nessus Plugin ID 206166

Language:

Synopsis

The remote host is missing a security update.

Description

The version of Acronis Cyber Infrastructure installed on the remote host is prior to 5.0.1-61, 5.1.1-71, 5.2.1-69, 5.3.1-53, or 5.4.4-132. It is, therefore, affected by a vulnerability as referenced in the SEC-6452 advisory.

 - Remote command execution due to use of default passwords. The following products are affected: Acronis Cyber Infrastructure (ACI) before build 5.0.1-61, Acronis Cyber Infrastructure (ACI) before build 5.1.1-71, Acronis Cyber Infrastructure (ACI) before build 5.2.1-69, Acronis Cyber Infrastructure (ACI) before build 5.3.1-53, Acronis Cyber Infrastructure (ACI) before build 5.4.4-132. (CVE-2023-45249)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Solution

Upgrade to Acronis Cyber Infrastructure version 5.0.1-61 / 5.1.1-71 / 5.2.1-69 / 5.3.1-53 / 5.4.4-132 or later.

See Also

https://security-advisory.acronis.com/advisories/SEC-6452

Plugin Details

Severity: Critical

ID: 206166

File Name: acronis_cyber_infrastructure_SEC-6452.nasl

Version: 1.2

Type: remote

Family: CGI abuses

Published: 8/23/2024

Updated: 10/3/2024

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Critical

Score: 9.0

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.3

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2023-45249

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:F/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:acronis:cyber_infrastructure

Required KB Items: installed_sw/Acronis Cyber Infrastructure

Exploit Available: true

Exploit Ease: Exploits are available

Patch Publication Date: 7/24/2024

Vulnerability Publication Date: 7/24/2024

CISA Known Exploited Vulnerability Due Dates: 8/19/2024

Exploitable With

Metasploit (Acronis Cyber Infrastructure default password remote code execution)

Reference Information

CVE: CVE-2023-45249