Lucene search

[email protected]NVD:CVE-2021-44204

HistoryFeb 04, 2022 - 11:15 p.m.

CVE-2021-44204

2022-02-0423:15:12

CWE-285

[email protected]

web.nvd.nist.gov

cve-2021-44204

local privilege escalation

named pipe

improper access control

acronis cyber protect 15

acronis agent

acronis cyber protect home office

acronis true image 2021

windows

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

Affected configurations

Nvd

Node

acronistrue_imageMatch2021-

acronistrue_imageMatch2021update_1windows

acronistrue_imageMatch2021update_2windows

acronistrue_imageMatch2021update_3windows

acronistrue_imageMatch2021update_4windows

acronistrue_imageMatch2021update_5windows

Node

acronisagentRange<c21.06

acroniscyber_protectMatch15-

acroniscyber_protectMatch15update1

acroniscyber_protectMatch15update2

acroniscyber_protect_home_officeMatch-

AND

microsoftwindowsMatch-

VendorProductVersionCPE
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:*:*:*:*:-:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_1:*:*:*:windows:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_2:*:*:*:windows:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_3:*:*:*:windows:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_4:*:*:*:windows:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_5:*:*:*:windows:*:*
acronisagent*cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*
acroniscyber_protect15cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*
acroniscyber_protect15cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*
acroniscyber_protect15cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*

Vendor	Product	Version	CPE
acronis	true_image	2021	cpe:2.3:a:acronis:true_image:2021:::::-::
acronis	true_image	2021	cpe:2.3:a:acronis:true_image:2021:update_1::::windows::*
acronis	true_image	2021	cpe:2.3:a:acronis:true_image:2021:update_2::::windows::*
acronis	true_image	2021	cpe:2.3:a:acronis:true_image:2021:update_3::::windows::*
acronis	true_image	2021	cpe:2.3:a:acronis:true_image:2021:update_4::::windows::*
acronis	true_image	2021	cpe:2.3:a:acronis:true_image:2021:update_5::::windows::*
acronis	agent	*	cpe:2.3:a:acronis:agent::::::::
acronis	cyber_protect	15	cpe:2.3:a:acronis:cyber_protect:15:-::::::
acronis	cyber_protect	15	cpe:2.3:a:acronis:cyber_protect:15:update1::::::
acronis	cyber_protect	15	cpe:2.3:a:acronis:cyber_protect:15:update2::::::

Rows per page:

1-10 of 121

References

security-advisory.acronis.com/advisories/SEC-2355

CVSS2

4.6

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:P/I:P/A:P

CVSS3

7.8

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

Percentile

5.1%

JSON

Related for NVD:CVE-2021-44204

cvelist1 cve1 prion1