5.5

CVE-2021-44199

DLL hijacking could lead to denial of service

DLL hijacking could lead to denial of service. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27305, Acronis Cyber Protect Home Office (Windows) before build 39612
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Acronis ≫ Agent Version -
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Version < 15
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Version 15 Update -
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Version 15 Update update1
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Version 15 Update update2
   Microsoft ≫ Windows Version -
Acronis ≫ Cyber Protect Home Office Version -
   Microsoft ≫ Windows Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.23% 0.131
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5.5 1.8 3.6
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
NIST 1.9 3.4 2.9
AV:L/AC:M/Au:N/C:N/I:N/A:P
CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://security-advisory.acronis.com/advisories/SEC-2508
Patch
Vendor Advisory