CVE-2023-41748

CriticalCVSS 9.8

Published: 31/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.07%

60th percentile - higher than 60% of all known CVEs

Summary

There is a remote command execution vulnerability due to improper input validation. This affects Acronis Cloud Manager (Windows) before build 6.2.23089.203.

Risk Assessment

The organization may be exposed to remote attacks that could lead to unauthorized access to systems and data.

Recommendation

It is recommended to update Acronis Cloud Manager to version 6.2.23089.203 or later to mitigate the risk associated with this vulnerability.

Other vulnerabilities in Acronis Cloud Manager (Windows) before build 6.2.23089.203

See all

CVE-2023-41746Critical
There is a remote command execution vulnerability due to improper input validation. This affects Acronis Cloud Manager (Windows) before build 6.2.23089.203.
CVE-2023-41747Medium
CVE-2023-41747 involves sensitive information disclosure due to unauthenticated path traversal. The affected products are Acronis Cloud Manager (Windows) before build 6.2.23089.203.

Original NVD description (English source)

Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build 6.2.23089.203.