EDB-49113

PoC

Acronis Cyber Backup 12.5 Build 16341 - Unauthenticated SSRF

view exploit source exploit_dbtype webappsauthor Julien Ahrenspublished 2020-11-27catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2020-16171USmedium6.5Exploit
An issue was discovered in Acronis Cyber Backup before 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams/ accept an additional custom Shard header. The value of this…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan