Critical Insecure Default Password Vulnerability in Acronis Cyber Infrastructure

What changed

Acronis Cyber Infrastructure (ACI) has been found to have a serious vulnerability related to the use of insecure default passwords. This flaw can lead to remote command execution, posing a substantial risk to users who have not updated their systems.

The vulnerability affects multiple builds of ACI, highlighting the importance of ensuring that default credentials are changed during initial setup.

Who is affected

The vulnerability impacts several versions of Acronis Cyber Infrastructure, which could leave numerous organizations at risk if they have not updated their systems.

Users of Acronis Cyber Infrastructure should be particularly vigilant, as the following builds are affected:

• Acronis Cyber Infrastructure (ACI) before build 5.0.1-61
• Acronis Cyber Infrastructure (ACI) before build 5.1.1-71
• Acronis Cyber Infrastructure (ACI) before build 5.2.1-69
• Acronis Cyber Infrastructure (ACI) before build 5.3.1-53

What to do

Organizations using the affected versions of Acronis Cyber Infrastructure should take immediate action to mitigate the risks associated with this vulnerability.

It is crucial to update to the latest build and ensure that all default passwords are changed to secure alternatives.

• Upgrade to a patched version of Acronis Cyber Infrastructure.
• Change all default passwords to strong, unique passwords.
• Regularly audit security settings and configurations.