7.3

CVE-2021-44206

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Acronis ≫ True Image Version 2021 Update - SwPlatform windows
Acronis ≫ True Image Version 2021 Update update_1 SwPlatform windows
Acronis ≫ True Image Version 2021 Update update_2 SwPlatform windows
Acronis ≫ True Image Version 2021 Update update_3 SwPlatform windows
Acronis ≫ True Image Version 2021 Update update_4 SwPlatform windows
Acronis ≫ Cyber Protect Home Office Version -
   Microsoft ≫ Windows Version -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.24% 0.148
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.3 1.3 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
NIST 4.4 3.4 6.4
AV:L/AC:M/Au:N/C:P/I:P/A:P
CWE-427 Uncontrolled Search Path Element

The product uses a fixed or controlled search path to find resources, but one or more locations in that path can be under the control of unintended actors.

https://security-advisory.acronis.com/advisories/SEC-3058
Vendor Advisory