CVE-2022-3405

Published: May 3, 2023Modified: Nov 21, 2024

8.8

Vector

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: NVD

Description

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.

Affected (19)

Products: Acronis: Cyber Backup, Cyber Protect

Acronis

2 products

Cyber Backup

Cyber Protect

Configuration A

19 vulnerable · 2 platform

Vulnerable Software	Affected Versions
Acronis Cyber Backup	Version 12.5
Acronis Cyber Backup	Version 12.5 10130
Acronis Cyber Backup	Version 12.5 10330
Acronis Cyber Backup	Version 12.5 11010
Acronis Cyber Backup	Version 12.5 13160
Acronis Cyber Backup	Version 12.5 13400
Acronis Cyber Backup	Version 12.5 14280
Acronis Cyber Backup	Version 12.5 14330
Acronis Cyber Backup	Version 12.5 16180
Acronis Cyber Backup	Version 12.5 16318
Acronis Cyber Backup	Version 12.5 16327
Acronis Cyber Backup	Version 12.5 7641
Acronis Cyber Backup	Version 12.5 7970
Acronis Cyber Backup	Version 12.5 8850
Acronis Cyber Backup	Version 12.5 9010
Acronis Cyber Protect	Version 15
Acronis Cyber Protect	Version 15 update1
Acronis Cyber Protect	Version 15 update2
Acronis Cyber Protect	Version 15 update3