CVE-2023-41743
High
Description
Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Protect Cloud Agent (Windows) before build 31637, Acronis Cyber Protect 15 (Windows) before build 35979, Acronis True Image OEM (Windows) before build 42575.
SeverityHigh
CVSS7.8
Exploit probability—
ProductAcronis Agent
PublishedAug 31, 2023
First seenAug 31, 2023
Weakness typeCWE-269Improper privilege management
How to fix
Update
- acronis agentc23.02 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acronis agent | v < c23.02 | c23.02 |
| acronis cyber_protect | 15 | — |
| acronis cyber_protect_home_office | No range specified, 39900, 40107, 40173, 40208 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.