CVE-2021-38086

EPSS 0.05%
Published 12.08.2021 14:15:07
Last modified 21.11.2024 06:16:20
Source cve@mitre.org
Teams watchlist Login
Open Login

Acronis Cyber Protect 15 for Windows prior to build 27009 and Acronis Agent for Windows prior to build 26226 allowed local privilege escalation via DLL hijacking.

Affected products Warnungen 0 Metrics 3 CWE 1 References 4

Data is provided by the National Vulnerability Database (NVD)

Acronis ≫ Cyber Protect Version < 15

Microsoft ≫ Windows Version-

Acronis ≫ Cyber Protect Version15 Update-

Microsoft ≫ Windows Version-

Acronis ≫ Cyber Protect Version15 Updateupdate1

Microsoft ≫ Windows Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Type	Source	Score	Percentile
EPSS	FIRST.org	0.05%	0.137

CVSS Metriken
Source	Base Score	Exploit Score	Impact Score	Vector string
nvd@nist.gov	7.8	1.8	5.9	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	4.4	3.4	6.4	AV:L/AC:M/Au:N/C:P/I:P/A:P

CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://kb.acronis.com/content/68564

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2021-38086

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2021-38086

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2021-38086

EUVD