Satz4797

**Name of the Vulnerable Software and Affected Versions** Acronis DeviceLock DLP (Windows) versions prior to 9.0.93212 **Description** Local privilege escalation is possible due to a DLL hijacking issue. DLL hijacking occurs when an application loads a malicious dynamic-link library (DLL) instead of the intended one, allowing an attacker to execute code with elevated privileges. **Recommendations** Update to build 9.0.93212 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Protect Cloud Agent (Windows) versions prior to build 41124 **Description** A local privilege escalation can occur due to a DLL hijacking issue. This allows an attacker to execute code with elevated privileges. **Recommendations** Update Acronis Cyber Protect Cloud Agent (Windows) to build 41124 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis Cloud Manager (Windows) versions prior to build 6.4.25342.354 **Description** A local privilege escalation can occur due to insecure folder permissions. **Recommendations** Update Acronis Cloud Manager (Windows) to build 6.4.25342.354 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis True Image (Windows) versions prior to build 42386 **Description** A local privilege escalation issue exists due to a DLL hijacking weakness. This allows an attacker to potentially gain elevated privileges on a system. **Recommendations** Update Acronis True Image (Windows) to build 42386 or later.

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Files (Windows) versions before 9.0.0x24 **Description** The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This allows an attacker to potentially gain elevated privileges on the system. **Recommendations** For versions before 9.0.0x24, update to a version 9.0.0x24 or later to resolve the issue. As a temporary workaround, consider restricting access to vulnerable DLLs until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Acronis Cyber Protect Cloud Agent (Windows) versions before build 38235 **Description** A local privilege escalation issue exists due to a DLL hijacking vulnerability. This can cause local privilege escalation. **Recommendations** For Acronis Cyber Protect Cloud Agent (Windows) versions before build 38235, update to build 38235 or later to resolve the issue. As a temporary workaround, consider restricting access to vulnerable DLLs until a patch is available.

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent (Windows) versions before build 38235 Acronis Cyber Protect 16 (Windows) versions before build 39169 Description: A DLL hijacking vulnerability can lead to local privilege escalation. This issue affects Acronis products, allowing potential exploitation. Recommendations: For Acronis Cyber Protect Cloud Agent (Windows) versions before build 38235, update to build 38235 or later. For Acronis Cyber Protect 16 (Windows) versions before build 39169, update to build 39169 or later.