CVE-2023-41748

CVSS 3.1 Score 9.8 of 10 (high)

Details

Published Aug 31, 2023
Updated: Sep 6, 2023
CWE ID 20

Summary

CVE-2023-41748 is a remote command execution vulnerability affecting Acronis Cloud Manager for Windows before build 6.2.23089.203. Hackers can exploit this issue by providing malicious input that bypasses the input validation checks in the software. Successful exploitation allows them to execute arbitrary commands on the targeted system, potentially leading to significant security risks such as data theft or unauthorized system access. Users are urged to update to the latest version of Acronis Cloud Manager to mitigate this vulnerability.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share