Vulnerabilities

TI-2023-26519 CVE-2023-48677 · GHSA-qgrp-jmm8-2jmf

Uncontrolled search path in Acronis Cyber Protect Home Office

LOW 34

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00248 Published 2023-12-12 Fixed in 40901, 39378 +2 CWE-427

TI-2023-23740 CVE-2023-44208 · GHSA-g5q7-xv5f-9xr9

Missing authorization in Acronis Cyber Protect Home Office

MEDIUM 41

Sensitive information disclosure and manipulation due to missing authorization.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00367 Published 2023-10-04 Fixed in 40713, 42575 CWE-862

TI-2023-04642 CVE-2023-5042 · GHSA-cpvg-3p8x-hcjm

Incorrect default permissions in Acronis Cyber Protect Home Office

LOW 33

Sensitive information disclosure due to insecure folder permissions.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00353 Published 2023-09-20 Fixed in 40713, 42575 CWE-276

TI-2022-23213 CVE-2022-46869 · GHSA-9rvg-h3ph-f3v3

Link following in Acronis Cyber Protect Home Office

LOW 36

Local privilege escalation during installation due to improper soft link handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00236 Published 2023-08-31 Fixed in 40278, 42575 CWE-610

TI-2023-22158 CVE-2023-41743 · GHSA-xv9r-2ff8-gxxc

Improper privilege management in Acronis Cyber Protect Home Office

LOW 36

Local privilege escalation due to insecure driver communication port permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00372 Published 2023-08-31 Fixed in 40278, 31637 +2 CWE-269

TI-2022-23212 CVE-2022-46868 · GHSA-ph2g-3w43-q6vp

Local privilege escalation during recovery due to improper soft link handling.

LOW 35

Local privilege escalation during recovery due to improper soft link handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00173 Published 2023-08-31 Fixed in 40173 CWE-610

TI-2022-22414 CVE-2022-45451 · GHSA-69gc-792g-gcp5

Improper privilege management in Acronis Cyber Protect Home Office

LOW 37

Local privilege escalation due to insecure driver communication port permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00512 Published 2023-08-31 Fixed in 40173, 30600 +1 CWE-269

TI-2022-04041 CVE-2022-4418 · GHSA-9v6r-g5cx-h6fg

Improper signature verification in Acronis Cyber Protect Home Office

LOW 35

Local privilege escalation due to unrestricted loading of unsigned libraries.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00121 Published 2023-05-18 Fixed in 40208 CWE-347

TI-2022-22418 CVE-2022-45455 · GHSA-4pgg-95h7-rqc6

Local privilege escalation due to incomplete uninstallation cleanup.

LOW 33

Local privilege escalation due to incomplete uninstallation cleanup.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00149 Published 2023-02-13 Fixed in 40107, 30025 +1 CWE-459

TI-2022-22035 CVE-2022-44746 · GHSA-4mgp-8x4h-v3vm

Information disclosure in Acronis Cyber Protect Home Office

LOW 24

Sensitive information disclosure due to insecure folder permissions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00149 Published 2022-11-07 Fixed in 40107 CWE-200

TI-2022-22034 CVE-2022-44745 · GHSA-982x-v642-cgcx

Sensitive information leak through log files in Acronis Cyber Protect Home Office

LOW 24

Sensitive information leak through log files.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00164 Published 2022-11-07 Fixed in 40107 CWE-532

TI-2022-22033 CVE-2022-44744 · GHSA-4vg6-qj9w-48p3

Uncontrolled search path in Acronis Cyber Protect Home Office

LOW 31

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00182 Published 2022-11-07 Fixed in 40107 CWE-427

TI-2022-22036 CVE-2022-44747 · GHSA-46mv-p9ph-q95r

Link following in Acronis Cyber Protect Home Office

LOW 35

Local privilege escalation due to improper soft link handling.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00204 Published 2022-11-07 Fixed in 40107 CWE-610

TI-2022-22022 CVE-2022-44733 · GHSA-2c3g-5x92-qfrv

Improper privilege management in Acronis Cyber Protect Home Office

LOW 35

Local privilege escalation due to insecure folder permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00209 Published 2022-11-07 Fixed in 39900 CWE-269

TI-2022-22021 CVE-2022-44732 · GHSA-c538-4cm5-rh89

Improper privilege management in Acronis Cyber Protect Home Office

LOW 35

Local privilege escalation due to insecure folder permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00168 Published 2022-11-07 Fixed in 39900 CWE-269

TI-2021-19900 CVE-2021-44206 · GHSA-49vp-rvr9-vh53

Uncontrolled search path in Acronis Cyber Protect Home Office

LOW 32

Local privilege escalation due to DLL hijacking vulnerability in Acronis Media Builder service.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00239 Published 2022-02-04 Fixed in 39612, 39287 CWE-427

TI-2021-19898 CVE-2021-44204 · GHSA-v5vh-gq27-ch94

Improper authorization in Acronis Cyber Protect 15

LOW 33

Local privilege escalation via named pipe due to improper access control checks.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00197 Published 2022-02-04 Fixed in 28035, 27147 +2 CWE-285

TI-2022-08059 CVE-2022-24114 · GHSA-whc8-c4p3-5m9v

Race condition in Acronis Cyber Protect Home Office

LOW 30

Local privilege escalation due to race condition on application startup.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00154 Published 2022-02-04 Fixed in 39605, 39287 CWE-362

TI-2021-19899 CVE-2021-44205 · GHSA-4cr8-mrwp-p7xm

Uncontrolled search path in Acronis Cyber Protect Home Office

LOW 32

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00239 Published 2022-02-04 Fixed in 39612, 39287 CWE-427

TI-2022-08060 CVE-2022-24115 · GHSA-34f6-pfxg-3464

Improper signature verification in Acronis Cyber Protect Home Office

LOW 33

Local privilege escalation due to unrestricted loading of unsigned libraries.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.0016 Published 2022-02-04 Fixed in 39605, 39287 CWE-347

TI-2022-08058 CVE-2022-24113 · GHSA-5h99-pwr2-w237

Incorrect default permissions in Acronis Cyber Protect 15

LOW 33

Local privilege escalation due to excessive permissions assigned to child processes.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00209 Published 2022-02-04 Fixed in 28035, 27147 +2 CWE-250

TI-2021-19893 CVE-2021-44199 · GHSA-r24c-4jp9-g34v

Uncontrolled search path in Acronis Cyber Protect 15

LOW 24

DLL hijacking could lead to denial of service.

CVSS 3.1MEDIUM 5.5 Local No auth User interaction EPSS 0.00233 Published 2021-11-29 Fixed in 28035, 27305 +1 CWE-427

Vulnerabilities

Filters