PT-2023-30892 · Acronis · Acronis Cyber Protect Cloud Agent+1

Veath · Publicado 2023-12-12 · Atualizado 2025-06-04 · CVE-2023-48677

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Home Office versions prior to build 40901 Acronis Cyber Protect Cloud Agent versions prior to build 39378

Description The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This allows for potential exploitation where an attacker could gain elevated privileges on a system.

Recommendations For Acronis Cyber Protect Home Office versions prior to build 40901, update to build 40901 or later to resolve the issue. For Acronis Cyber Protect Cloud Agent versions prior to build 39378, update to build 39378 or later to resolve the issue.

Correção

LPE

Uncontrolled Search Path Element

Enumeração de Fraquezas

CWE-427

Identificadores relacionados

CVE-2023-48677

Produtos afetados

Acronis Cyber Protect Cloud Agent

Acronis Cyber Protect Home Office

Referências · 6

• https://twitter.com/CVEnew/status/1734496412556267978 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-48677 · Nota de Segurança
• https://t.me/cvenotify/124589 · Publicação no Telegram
• https://t.me/cvenotify/109391 · Publicação no Telegram
• https://security-advisory.acronis.com/advisories/SEC-5620 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-48677 · Aviso do Fabricante