CVE-2022-45451
High
Description
Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build 30984.
SeverityHigh
CVSS7.8
Exploit probability—
ProductAcronis Agent
PublishedAug 31, 2023
First seenAug 31, 2023
Weakness typeCWE-269Improper privilege management
How to fix
Update
- acronis agentc22.10 or later
- acronis cyber_protect_home_office40173 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acronis agent | v < c22.10 | c22.10 |
| acronis cyber_protect | 15 | — |
| acronis cyber_protect_home_office | v < 40173 | 40173 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.