Remote Command Execution Vulnerability in Acronis Cloud Manager
CVE-2023-41748

8HIGH

Key Information:

Vendor
Acronis
Status
Acronis Cloud Manager
Vendor
CVE Published:
31 August 2023

Summary

A vulnerability exists in Acronis Cloud Manager on Windows, allowing remote command execution due to improper input validation. Attackers can exploit this flaw to execute arbitrary commands, compromising the security of the affected systems. Users are advised to upgrade to build 6.2.23089.203 or later to mitigate this risk.

Affected Version(s)

Acronis Cloud Manager Windows < 6.2.23089.203

References

https://security-advisory.acronis.com/advisories/SEC-5816
vendor-advisory

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

@putsi (https://hackerone.com/putsi)
.