PT-2025-5582 · Acronis · Acronis Cyber Protect Cloud Agent

Cyberexplorer · Published 2025-01-30 · Updated 2025-02-01 · CVE-2025-24827

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Acronis Cyber Protect Cloud Agent (Windows) versions prior to build 39378

Description The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This means that an attacker could potentially exploit this weakness to gain elevated privileges on a system, potentially leading to unauthorized access or control. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Acronis Cyber Protect Cloud Agent (Windows) versions prior to build 39378, update to a version newer than build 39378 to resolve the issue. As a temporary workaround, consider restricting access to sensitive system resources to minimize the risk of exploitation.

Fix

LPE

Untrusted Search Path

Weakness Enumeration

CWE-426

Related Identifiers

BDU:2025-10528

CVE-2025-24827

Affected Products

Acronis Cyber Protect Cloud Agent

References · 6

• https://bdu.fstec.ru/vul/2025-10528 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-7841 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-24827 · Security Note
• https://t.me/cvenotify/109395 · Telegram Post
• https://t.me/cvedetector/16933 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1885480697848037539 · Twitter Post