Mmg

**Name of the Vulnerable Software and Affected Versions** Acronis DeviceLock DLP (Windows) versions prior to 9.0.15051.93227 **Description** Local privilege escalation is possible due to a DLL hijacking issue. DLL hijacking occurs when an application loads a malicious dynamic-link library (DLL) instead of the intended one, allowing an attacker to execute code with elevated privileges. **Recommendations** Update to build 9.0.15051.93227 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis DeviceLock DLP (Windows) versions prior to 9.0.15051.93227 **Description** Local privilege escalation is possible due to an EXE hijacking issue. This occurs when an application searches for a required executable file in an insecure order, allowing an attacker to place a malicious executable in a higher-priority directory to be executed with elevated privileges. **Recommendations** Update to build 9.0.15051.93227 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis Snap Deploy (Windows) versions prior to build 4569 **Description** The issue is related to sensitive information disclosure due to insecure folder permissions. This allows sensitive information to be exposed. **Recommendations** For versions prior to build 4569, update to a version that includes the necessary security fixes to address the insecure folder permissions issue.

**Name of the Vulnerable Software and Affected Versions** Acronis Snap Deploy (Windows) versions before build 4569 **Description** A local privilege escalation issue exists due to a DLL hijacking vulnerability. This allows for potential exploitation, leading to elevated privileges on the system. The estimated number of potentially affected devices worldwide is not specified. There is no information provided about real-world incidents where this issue was exploited. **Recommendations** For Acronis Snap Deploy (Windows) versions before build 4569, update to a version after build 4569 to resolve the issue. As a temporary workaround, consider restricting access to vulnerable DLLs until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Acronis Snap Deploy (Windows) versions before build 3640 **Description** The issue is related to local privilege escalation due to insecure folder permissions. **Recommendations** For Acronis Snap Deploy (Windows) versions before build 3640, update to build 3640 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Acronis Snap Deploy (Windows) versions prior to build 3640 **Description** The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. **Recommendations** For Acronis Snap Deploy (Windows) versions prior to build 3640, update to build 3640 or later to resolve the issue.

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 (Windows) versions prior to build 28035 Description: DLL hijacking could lead to local privilege escalation. Recommendations: For Acronis Cyber Protect 15 (Windows) versions prior to build 28035, update to build 28035 or later to resolve the issue. As a temporary workaround, consider restricting access to vulnerable DLLs until a patch is applied.

**Name of the Vulnerable Software and Affected Versions** Acronis True Image version 2021 **Description** The issue arises from improper ACL settings of the C:ProgramDataAcronis directory by Acronis True Image 2021. This allows an unprivileged user to execute arbitrary code with SYSTEM privileges by placing a DLL in specific paths within C:ProgramDataAcronis. **Recommendations** For Acronis True Image version 2021, as a temporary workaround, consider restricting access to the C:ProgramDataAcronis directory to prevent unprivileged users from placing malicious DLLs. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Acronis True Image version 2021 **Description** The issue concerns an OpenSSL component in Acronis True Image 2021, where the OPENSSLDIR variable is specified as a subdirectory within C:jenkins agent. This component is used by a privileged service within Acronis True Image. An unprivileged Windows user can create subdirectories off the system root, potentially allowing the creation of a specially-crafted openssl.cnf file. This could lead to arbitrary code execution with SYSTEM privileges. **Recommendations** For Acronis True Image version 2021, consider restricting access to the system root to prevent unprivileged users from creating subdirectories that could be used to exploit this issue. As a temporary workaround, restrict the use of the OpenSSL component until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Backup versions 12.5 Acronis Cyber Protect version 15 **Description** The issue concerns an OpenSSL component in Acronis Cyber Backup and Cyber Protect that specifies an OPENSSLDIR variable as a subdirectory within C:jenkins agent. This component is used by a privileged service in these products. Unprivileged Windows users can create subdirectories off of the system root, allowing a user to create a path to a specially-crafted openssl.cnf file. This can lead to arbitrary code execution with SYSTEM privileges. **Recommendations** For Acronis Cyber Backup version 12.5, consider disabling the privileged service that uses the OpenSSL component until a patch is available. For Acronis Cyber Protect version 15, restrict access to the subdirectory within C:jenkins agent to minimize the risk of exploitation. Avoid using the `OPENSSLDIR` variable in the affected OpenSSL component until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.