PT-2021-24060 · Acronis · Acronis Cyber Protect Home Office+3

Published 2021-11-25 · Updated 2021-11-30 · CVE-2021-44199

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 15 (Windows) versions prior to build 28035 Acronis Agent (Windows) versions prior to build 27305 Acronis Cyber Protect Home Office (Windows) versions prior to build 39612

Description: A DLL hijacking issue could lead to a denial of service.

Recommendations: For Acronis Cyber Protect 15 (Windows) versions prior to build 28035, update to build 28035 or later. For Acronis Agent (Windows) versions prior to build 27305, update to build 27305 or later. For Acronis Cyber Protect Home Office (Windows) versions prior to build 39612, update to build 39612 or later.

Fix

DoS

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2021-44199

Affected Products

Acronis

Acronis Agent

Acronis Cyber Protect 15

Acronis Cyber Protect Home Office

References · 5

• https://security-advisory.acronis.com/advisories/SEC-2508 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-44199 · Security Note
• https://osv.dev/vulnerability/CVE-2021-44199 · Vendor Advisory
• https://t.me/cibsecurity/33058 · Telegram Post
• https://t.me/cvenotify/23951 · Telegram Post