EUVD-2023-49550

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

Sensitive data disclosure risk in Acronis products due to missing authorization in certain builds.

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability of backup and data recovery software on computers and servers with Acronis Agent, related to authentication errors, allows attackers to escalate their privileges.	10 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-45244	6 Oct 202314:18	–	circl
CNNVD	Acronis Agent Security Vulnerability	6 Oct 202300:00	–	cnnvd
CVE	CVE-2023-45244	6 Oct 202309:47	–	cve
Cvelist	CVE-2023-45244	6 Oct 202309:47	–	cvelist
Kitploit	Cve-Collector - Simple Latest CVE Collector	1 Nov 202311:30	–	kitploit
NVD	CVE-2023-45244	6 Oct 202310:15	–	nvd
OSV	CVE-2023-45244	6 Oct 202310:15	–	osv
Prion	Authorization	6 Oct 202310:15	–	prion
Positive Technologies	PT-2023-5799 · Acronis · Acronis Cyber Protect 16 +2	6 Oct 202300:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "4138f004-0eb8-38bc-aabe-d12d96e87009",
        "vendor": {
          "name": "Acronis"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "994750a3-e593-358d-8f6a-d178f8ef57e1",
        "product": {
          "name": "Acronis Cyber Protect 16"
        },
        "product_version": "unspecified <37391"
      },
      {
        "id": "dcb4508c-b819-3fe0-b494-dbce181f05df",
        "product": {
          "name": "Acronis Cyber Protect Cloud Agent"
        },
        "product_version": "unspecified <35895"
      }
    ]
  }
]

Source	Link
security-advisory	www.security-advisory.acronis.com/advisories/SEC-5907

03 Oct 2025 20:07Current

7.4High risk

Vulners AI Score7.4

CVSS 37.1

CVSS 3.17.1

EPSS0.00214