PT-2022-21987 · Acronis · Acronis Agent+3

Boldglum + 1 · Published 2022-11-17 · Updated 2025-10-07 · CVE-2022-3405

Positive Technologies (AI Summary)

CVSS v3.1

9.3

Critical

Base vector

AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect 15 versions prior to build 29486 Acronis Cyber Backup 12.5 versions prior to build 16545

Description The issue is related to excessive privileges assigned to Acronis Agent, leading to code execution and sensitive information disclosure.

Recommendations For Acronis Cyber Protect 15 versions prior to build 29486, update to build 29486 or later. For Acronis Cyber Backup 12.5 versions prior to build 16545, update to build 16545 or later.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-269

Related Identifiers

CVE-2022-3405

Affected Products

Acronis

Acronis Agent

Acronis Cyber Backup 12.5

Acronis Cyber Protect 15

References · 8

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/acronis_cyber_protect_unauth_rce_cve_2022_3405.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/acronis_cyber_protect_machine_info_disclosure.rb · Exploit
• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/acronis_cyber_protect_unauth_rce_cve_2022_3405.rb · Exploit
• 🔥 https://herolab.usd.de/security-advisories/usd-2022-0008 · Exploit
• https://osv.dev/vulnerability/CVE-2022-3405 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3405 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-4092 · Vendor Advisory
• https://t.me/cibsecurity/63210 · Telegram Post