PT-2022-27521 · Acronis · Acronis Cyber Protect Home Office+3

Tkoyeung · Published 2022-11-17 · Updated 2023-02-23 · CVE-2022-45455

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Home Office versions prior to build 40107 Acronis Agent versions prior to build 30025 Acronis Cyber Protect 15 versions prior to build 30984

Description The issue is related to local privilege escalation due to incomplete uninstallation cleanup.

Recommendations For Acronis Cyber Protect Home Office versions prior to build 40107, update to build 40107 or later. For Acronis Agent versions prior to build 30025, update to build 30025 or later. For Acronis Cyber Protect 15 versions prior to build 30984, update to build 30984 or later.

Fix

LPE

Weakness Enumeration

CWE-459

Related Identifiers

CVE-2022-45455

Affected Products

Acronis

Acronis Agent

Acronis Cyber Protect 15

Acronis Cyber Protect Home Office

References · 4

• https://security-advisory.acronis.com/advisories/SEC-4459 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45455 · Security Note
• https://osv.dev/vulnerability/CVE-2022-45455 · Vendor Advisory
• https://t.me/cvenotify/44218 · Telegram Post