Database/Control plane, storage & DevOps
Acronis Cyber Infrastructure: Default passwords
CVSS 9.8CVE-2023-45249Control plane, storage & DevOpsKnown exploitedcurated
Impact
Default passwords -> unauthenticated remote command execution
Who can reach it
Network (remote)
What to do
Control-plane: patch + change all default credentials on the storage/backup appliance
References
Related entries
- Fortinet FortiClient EMS: Unauthenticated SQL injectionCVE-2023-48788 · Fortinet FortiClient EMSCritical
- Palo Alto PAN-OS: Management web interface authentication bypassCVE-2024-0012 · Palo Alto PAN-OSCritical
- OpenVPN (tap-windows6): Unchecked write sizeCVE-2024-1305 · OpenVPN (tap-windows6)Critical
- Fortinet FortiOS: SSL-VPN out-of-bounds writeCVE-2024-21762 · Fortinet FortiOSCritical
- NetApp ONTAP Select Deploy administration utility (hard-coded credentials): Baked-in credentials let an attacker readCVE-2024-21990 · NetApp ONTAP Select Deploy administration utility (hard-coded credentials)Critical
- HPE Cray Parallel Application Launch Service (PALS) authentication bypass: Authentication bypass in the serviceCVE-2024-22441 · HPE Cray Parallel Application Launch Service (PALS) authentication bypassCritical
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.