7.8

CVE-2022-45451

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build 30984.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Acronis ≫ Agent SwPlatform windows Version < c22.10
Acronis ≫ Cyber Protect Version 15 Update - SwPlatform windows
Acronis ≫ Cyber Protect Version 15 Update update1 SwPlatform windows
Acronis ≫ Cyber Protect Version 15 Update update2 SwPlatform windows
Acronis ≫ Cyber Protect Version 15 Update update3 SwPlatform windows
Acronis ≫ Cyber Protect Version 15 Update update4 SwPlatform windows
Acronis ≫ Cyber Protect Version 15 Update update5 SwPlatform windows
Acronis ≫ Cyber Protect Home Office SwPlatform windows Version < 40173
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.47% 0.368
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 7.8 1.8 5.9
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
security@acronis.com 8.8 2 6
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-269 Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

https://security-advisory.acronis.com/SEC-5487
Vendor Advisory
Release Notes
https://security-advisory.acronis.com/advisories/SEC-4858
Vendor Advisory
Release Notes