CVE-2022-24113

🗓️ 04 Feb 2022 22:29:30Reported by AcronisType

Local privilege escalation in Acronis product

Reporter	Title	Published	Views	Family All 7
ATTACKERKB	CVE-2022-24113	2 Feb 202200:00	–	attackerkb
CNNVD	Acronis 多款产品安全漏洞	4 Feb 202200:00	–	cnnvd
CNVD	Acronis has unspecified vulnerabilities in several products	9 Feb 202200:00	–	cnvd
Cvelist	CVE-2022-24113 Local privilege escalation due to excessive permissions assigned to child processes	4 Feb 202222:29	–	cvelist
EUVD	EUVD-2022-29025	3 Oct 202520:07	–	euvd
NVD	CVE-2022-24113	4 Feb 202223:15	–	nvd
Prion	Privilege escalation	4 Feb 202223:15	–	prion

NVD

Node

acronis agentRange<c21.06

acronis cyber_protectMatch15-

acronis cyber_protectMatch15update1

acronis cyber_protectMatch15update2

acronis cyber_protect_home_officeMatch-

AND

microsoft windowsMatch-

Node

acronis true_imageMatch2021-windows

acronis true_imageMatch2021update_1windows

acronis true_imageMatch2021update_2windows

acronis true_imageMatch2021update_3windows

acronis true_imageMatch2021update_4windows

acronis true_imageMatch2021update_5windows

[
  {
    "platforms": [
      "Windows"
    ],
    "product": "Acronis Cyber Protect 15",
    "vendor": "Acronis",
    "versions": [
      {
        "lessThan": "28035",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "Windows"
    ],
    "product": "Acronis Agent",
    "vendor": "Acronis",
    "versions": [
      {
        "lessThan": "27147",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "Windows"
    ],
    "product": "Acronis Cyber Protect Home Office",
    "vendor": "Acronis",
    "versions": [
      {
        "lessThan": "39612",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  },
  {
    "platforms": [
      "Windows"
    ],
    "product": "Acronis True Image 2021",
    "vendor": "Acronis",
    "versions": [
      {
        "lessThan": "39287",
        "status": "affected",
        "version": "unspecified",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
security-advisory	www.security-advisory.acronis.com/advisories/SEC-2881

21 Nov 2024 06:49Current

7.9High risk

Vulners AI Score7.9

CVSS 24.6

CVSS 3.17.8

EPSS0.00033