CVE-2022-45455

Published: Feb 13, 2023Modified: Jun 17, 2026

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.

Affected (7)

Products: Acronis: Agent, Cyber Protect, Cyber Protect Home Office

Acronis

3 products

Agent

Cyber Protect

Cyber Protect Home Office

Configuration A

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acronis Agent	Before c22.07
Acronis Cyber Protect	Version 15
Acronis Cyber Protect	Version 15 update1
Acronis Cyber Protect	Version 15 update2
Acronis Cyber Protect	Version 15 update3
Acronis Cyber Protect	Version 15 update4
Acronis Cyber Protect Home Office	All versions

Running on/with	Platform Versions
Microsoft Windows	All versions

Related CWEs

CWE-459

Incomplete Cleanup

The product does not properly "clean up" and remove temporary or supporting resources after they have been used.

References (2)

https://security-advisory.acronis.com/advisories/SEC-4459

Source: security@acronis.com

Vendor Advisory

https://security-advisory.acronis.com/advisories/SEC-4459

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.