Insecure Default Password Vulnerability in Acronis Cyber Infrastructure

What changed

Acronis has identified a critical vulnerability in its Cyber Infrastructure (ACI) products that stems from the use of insecure default passwords. This vulnerability could allow unauthorized remote command execution, posing significant security risks to affected systems.

Who is affected

The following versions of Acronis Cyber Infrastructure are impacted by this vulnerability:

1. Acronis Cyber Infrastructure (ACI) before build 5.0.1-61

• Organizations using Acronis Cyber Infrastructure for data management.
• IT departments responsible for maintaining Acronis products.
• Any users relying on Acronis for cloud-based infrastructure solutions.

What to do

It is crucial for affected users to take immediate action to mitigate the risks associated with this vulnerability. Users should update their Acronis Cyber Infrastructure to the latest builds that address this issue.

Additionally, organizations should review their security policies regarding default passwords and implement stronger password management practices.

• Upgrade to Acronis Cyber Infrastructure build 5.0.1-61 or later.
• Change any default passwords to secure, unique passwords.
• Conduct a security audit of systems utilizing Acronis Cyber Infrastructure.