PT-2023-30892 · Acronis · Acronis Cyber Protect Cloud Agent+1

Veath · Published 2023-12-12 · Updated 2025-06-04 · CVE-2023-48677

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Home Office versions prior to build 40901 Acronis Cyber Protect Cloud Agent versions prior to build 39378

Description The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This allows for potential exploitation where an attacker could gain elevated privileges on a system.

Recommendations For Acronis Cyber Protect Home Office versions prior to build 40901, update to build 40901 or later to resolve the issue. For Acronis Cyber Protect Cloud Agent versions prior to build 39378, update to build 39378 or later to resolve the issue.

Fix

LPE

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2023-48677

Affected Products

Acronis Cyber Protect Cloud Agent

Acronis Cyber Protect Home Office

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-48677 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-5620 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-48677 · Vendor Advisory
• https://twitter.com/CVEnew/status/1734496412556267978 · Twitter Post
• https://t.me/cvenotify/124589 · Telegram Post
• https://t.me/cvenotify/109391 · Telegram Post