PT-2023-5773 · Acronis · Acronis Cyber Protect 15+2

Published 2023-08-31 · Updated 2023-09-07 · CVE-2023-41742

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acronis Agent versions prior to build 30430 Acronis Cyber Protect 15 versions prior to build 35979

Description The issue is related to an excessive attack surface due to binding to an unrestricted IP address. This could allow a remote attacker to gain unauthorized access to the system.

Recommendations For Acronis Agent versions prior to build 30430, update to build 30430 or later. For Acronis Cyber Protect 15 versions prior to build 35979, update to build 35979 or later.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-1327

CWE-668

Related Identifiers

BDU:2023-06459

CVE-2023-41742

Affected Products

Acronis

Acronis Agent

Acronis Cyber Protect 15

References · 5

• https://bdu.fstec.ru/vul/2023-06459 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-41742 · Security Note
• https://osv.dev/vulnerability/CVE-2023-41742 · Vendor Advisory
• https://security-advisory.acronis.com/advisories/SEC-4351 · Vendor Advisory
• https://t.me/cibsecurity/69549 · Telegram Post