High severity8.8NVD Advisory· Published May 3, 2023· Updated Jun 17, 2026
CVE-2022-3405
CVE-2022-3405
Description
Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
23cpe:2.3:a:acronis:cyber_backup:12.5:-:*:*:*:*:*:*+ 15 more
- cpe:2.3:a:acronis:cyber_backup:12.5:-:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:10130:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:10330:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:11010:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:13160:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:13400:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:14280:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:14330:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:16180:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:16318:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:16327:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:7641:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:7970:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:8850:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_backup:12.5:9010:*:*:*:*:*:*
- (no CPE)range: <16545
cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:*
<29486+ 1 more
- (no CPE)range: <29486
- (no CPE)range: unspecified
- Range: unspecified
Patches
Vulnerability mechanics
References
2- herolab.usd.de/security-advisories/usd-2022-0008/nvdExploitThird Party Advisory
- security-advisory.acronis.com/advisories/SEC-4092nvdVendor Advisory
News mentions
0No linked articles in our index yet.