← Back

CVE-2024-49382

nvd nist
Published: Oct 15, 2024Modified: Jun 17, 2026

JSON object

Loading...
4.3
Vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Exploitability: 2.8 / Impact: 1.4
Source: NVD

Description

Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.

Affected (3)

Acronis
1 product
Cyber Protect
Configuration A
3 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Acronis
Cyber Protect
Up to 15
Cyber Protect
Version 16
Cyber Protect
Version 16 update1
Running on/withPlatform Versions
Linux
Linux Kernel
All versions
Microsoft
Windows
All versions

Related CWEs

CWE-1327
Binding to an Unrestricted IP Address
The product assigns the address 0.0.0.0 for a database server, a cloud service/instance, or any computing resource that communicates remotely.

References (1)

Source: security@acronis.com
Vendor Advisory

Timeline

No history available yet.