CVE-2023-41744

Published: Aug 31, 2023Modified: Nov 21, 2024

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.

Affected (7)

Products: Acronis: Agent, Cyber Protect

Acronis

2 products

Agent

Cyber Protect

Configuration A

7 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Acronis Agent	Before c22.10
Acronis Cyber Protect	Version 15
Acronis Cyber Protect	Version 15 update1
Acronis Cyber Protect	Version 15 update2
Acronis Cyber Protect	Version 15 update3
Acronis Cyber Protect	Version 15 update4
Acronis Cyber Protect	Version 15 update5

Running on/with	Platform Versions
Apple Macos	All versions

Related CWEs

CWE-347

Improper Verification of Cryptographic Signature

The product does not verify, or incorrectly verifies, the cryptographic signature for data.

References (2)

https://security-advisory.acronis.com/advisories/SEC-4728

Source: security@acronis.com

PatchRelease NotesVendor Advisory

https://security-advisory.acronis.com/advisories/SEC-4728

Source: af854a3a-2127-422b-91ae-364da2661108

PatchRelease NotesVendor Advisory

Timeline

No history available yet.