CVE-2023-45248

🗓️ 09 Oct 2023 11:08:37Reported by AcronisType

Local privilege escalation DLL hijacking in Acronis Cyber Protect Cloud Agent and Acronis Cyber Protect 16 for Windows

Reporter	Title	Published	Views	Family All 12
BDU FSTEC	The vulnerability of backup and data recovery software on computers and servers with Acronis Agent lies in its uncontrolled search path, which allows attackers to exploit their privileges.	10 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-45248	9 Oct 202316:16	–	circl
CNNVD	Acronis Agent Protect Code Issue Vulnerability	9 Oct 202300:00	–	cnnvd
CVE	CVE-2023-45248	9 Oct 202311:08	–	cve
EUVD	EUVD-2023-49554	3 Oct 202520:07	–	euvd
Kitploit	Cve-Collector - Simple Latest CVE Collector	1 Nov 202311:30	–	kitploit
NVD	CVE-2023-45248	9 Oct 202312:15	–	nvd
OSV	CVE-2023-45248	9 Oct 202312:15	–	osv
Prion	Privilege escalation	9 Oct 202312:15	–	prion
Positive Technologies	PT-2023-5788 · Acronis · Acronis Cyber Protect 16 +2	9 Oct 202300:00	–	ptsecurity

[
  {
    "vendor": "Acronis",
    "product": "Acronis Cyber Protect Cloud Agent",
    "platforms": [
      "Windows"
    ],
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "36497",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Acronis",
    "product": "Acronis Cyber Protect 16",
    "platforms": [
      "Windows"
    ],
    "versions": [
      {
        "version": "unspecified",
        "status": "affected",
        "lessThan": "37391",
        "versionType": "semver"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
security-advisory	www.security-advisory.acronis.com/advisories/SEC-6052

27 Feb 2024 16:55Current

8.2High risk

Vulners AI Score8.2

CVSS 36.6

EPSS0.00074

CWE-427