Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build 30984.
References
| Link | Resource |
|---|---|
| https://security-advisory.acronis.com/SEC-5487 | Release Notes Vendor Advisory |
| https://security-advisory.acronis.com/advisories/SEC-4858 | Release Notes Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
06 Sep 2023, 15:52
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Acronis agent
Acronis cyber Protect Acronis Acronis cyber Protect Home Office |
|
| CPE | cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:windows:*:* cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:windows:*:* cpe:2.3:a:acronis:agent:*:*:*:*:*:windows:*:* cpe:2.3:a:acronis:cyber_protect_home_office:*:*:*:*:*:windows:*:* cpe:2.3:a:acronis:cyber_protect:15:update5:*:*:*:windows:*:* cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:windows:*:* cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:windows:*:* cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:windows:*:* |
|
| CWE | CWE-269 | |
| References | (MISC) https://security-advisory.acronis.com/SEC-5487 - Release Notes, Vendor Advisory | |
| References | (MISC) https://security-advisory.acronis.com/advisories/SEC-4858 - Release Notes, Vendor Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.8 |
31 Aug 2023, 17:26
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-31 15:15
Updated : 2023-12-10 15:14
NVD link : CVE-2022-45451
Mitre link : CVE-2022-45451
CVE.ORG link : CVE-2022-45451
JSON object : View
Products Affected
acronis
- agent
- cyber_protect
- cyber_protect_home_office
CWE
CWE-269
Improper Privilege Management