PT-2024-39236 · Acronis · Acronis Cyber Protect Cloud Agent+1

Satz4797 · Published 2024-09-16 · Updated 2025-01-02 · CVE-2024-8766

Positive Technologies (AI Summary)

CVSS v3.1

6.7

Medium

Base vector

AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent (Windows) versions before build 38235 Acronis Cyber Protect 16 (Windows) versions before build 39169

Description: A DLL hijacking vulnerability can lead to local privilege escalation. This issue affects Acronis products, allowing potential exploitation.

Recommendations: For Acronis Cyber Protect Cloud Agent (Windows) versions before build 38235, update to build 38235 or later. For Acronis Cyber Protect 16 (Windows) versions before build 39169, update to build 39169 or later.

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

Related Identifiers

CVE-2024-8766

Affected Products

Acronis Cyber Protect 16

Acronis Cyber Protect Cloud Agent

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2024-8766 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-7218 · Vendor Advisory
• https://twitter.com/CVEnew/status/1835774912172073177 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1835816724991451613 · Twitter Post
• https://t.me/cvenotify/106010 · Telegram Post
• https://t.me/cvedetector/5760 · Telegram Post