High severity8.8NVD Advisory· Published May 3, 2023· Updated Jun 17, 2026

CVE-2022-3405

Description

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Acronis/Acronis Cyber Backupllm-create
Range: <16545
Acronis/Acronis Cyber Protect 16 (Linux)llm-fuzzy2 versions
<29486+ 1 more
- (no CPE)range: <29486
- (no CPE)range: unspecified
Acronis/Cyber Backup 12.5cpe-rescue
Range: unspecified

Patches

Vulnerability mechanics

References

herolab.usd.de/security-advisories/usd-2022-0008/nvdExploitThird Party Advisory
security-advisory.acronis.com/advisories/SEC-4092nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000