7.8

CVE-2021-44204

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

Data is provided by the National Vulnerability Database (NVD)
Acronis ≫ True Image Version2021 SwPlatform-
Acronis ≫ True Image Version2021 Updateupdate_1 SwPlatformwindows
Acronis ≫ True Image Version2021 Updateupdate_2 SwPlatformwindows
Acronis ≫ True Image Version2021 Updateupdate_3 SwPlatformwindows
Acronis ≫ True Image Version2021 Updateupdate_4 SwPlatformwindows
Acronis ≫ True Image Version2021 Updateupdate_5 SwPlatformwindows
Acronis ≫ Agent Version < c21.06
   Microsoft ≫ Windows Version-
Acronis ≫ Cyber Protect Version15 Update-
   Microsoft ≫ Windows Version-
Acronis ≫ Cyber Protect Version15 Updateupdate1
   Microsoft ≫ Windows Version-
Acronis ≫ Cyber Protect Version15 Updateupdate2
   Microsoft ≫ Windows Version-
Acronis ≫ Cyber Protect Home Office Version-
   Microsoft ≫ Windows Version-
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.04% 0.101
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvd@nist.gov 4.6 3.9 6.4
AV:L/AC:L/Au:N/C:P/I:P/A:P
CWE-285 Improper Authorization

The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.