Rapid7 Vulnerability & Exploit Database

Acronis Cyber Infrastructure default password remote code execution

Back to Search

Acronis Cyber Infrastructure default password remote code execution

Disclosed
07/24/2024
Created
10/03/2024

Description

Acronis Cyber Infrastructure (ACI) is an IT infrastructure solution that provides storage, compute, and network resources. Businesses and Service Providers are using it for data storage, backup storage, creating and managing virtual machines and software-defined networks, running cloud-native applications in production environments. This module exploits a default password vulnerability in ACI which allow an attacker to access the ACI PostgreSQL database and gain administrative access to the ACI Web Portal. This opens the door for the attacker to upload SSH keys that enables root access to the appliance/server. This attack can be remotely executed over the WAN as long as the PostgreSQL and SSH services are exposed to the outside world. ACI versions 5.0 before build 5.0.1-61, 5.1 before build 5.1.1-71, 5.2 before build 5.2.1-69, 5.3 before build 5.3.1-53, and 5.4 before build 5.4.4-132 are vulnerable.

Author(s)

  • h00die-gr3y <h00die.gr3y@gmail.com>
  • Acronis International GmbH

Platform

Linux,Unix

Architectures

cmd

Development

Module Options

To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':

msf > use exploit/linux/http/acronis_cyber_infra_cve_2023_45249
msf exploit(acronis_cyber_infra_cve_2023_45249) > show targets
    ...targets...
msf exploit(acronis_cyber_infra_cve_2023_45249) > set TARGET < target-id >
msf exploit(acronis_cyber_infra_cve_2023_45249) > show options
    ...show and set options...
msf exploit(acronis_cyber_infra_cve_2023_45249) > exploit

Metasploit

Penetration testing software for offensive security teams.
Key Features
Free Metasploit Pro Trial View All Features

Time is precious, so I don’t want to do something manually that I can automate. Leveraging the Metasploit Framework when automating any task keeps us from having to re-create the wheel as we can use the existing libraries and focus our efforts where it matters.

– Jim O’Gorman | President, Offensive Security

;