Acronis Agent (Windows)

CVEs (25)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2023-41744	Acronis Acronis Cyber Protect 16 (Linux)	Hig	0.51	7.8	0.00	Aug 31, 2023	Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.
CVE-2022-45451	Acronis Cyber Protect Home Office	Hig	0.51	7.8	0.00	Aug 31, 2023	Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build…
CVE-2022-45452	Acronis Acronis Agent (Windows)	Hig	0.51	7.8	0.00	May 18, 2023	Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-45455	Acronis Cyber Protect Home Office	Hig	0.51	7.8	0.00	Feb 13, 2023	Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-24113	Acronis True Image	Hig	0.51	7.8	0.00	Feb 4, 2022	Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build…
CVE-2021-44204	Acronis Cyber Protect Home Office	Hig	0.51	7.8	0.00	Feb 4, 2022	Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build…
CVE-2023-41749	Acronis Acronis Agent (Windows)	Hig	0.49	7.5	0.00	Aug 31, 2023	Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) before build 35979.
CVE-2023-41742	Acronis Acronis Cyber Protect 16 (Linux)	Hig	0.49	7.5	0.00	Aug 31, 2023	Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
CVE-2022-45459	Acronis Acronis Agent (Windows)	Hig	0.49	7.5	0.00	May 18, 2023	Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-45458	Acronis Acronis Cyber Protect 16 (Linux)	Hig	0.49	7.5	0.00	May 18, 2023	Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.
CVE-2022-45457	Acronis Acronis Agent (Windows)	Hig	0.49	7.5	0.00	May 18, 2023	Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-45450	Acronis Acronis Cyber Protect 16 (Linux)	Hig	0.49	7.5	0.00	May 18, 2023	Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984.
CVE-2022-45456	Acronis Acronis Agent (Windows)	Hig	0.49	7.5	0.00	Apr 26, 2023	Denial of service due to unauthenticated API endpoint. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 30161.
CVE-2022-45454	Acronis Acronis Agent (Windows)	Hig	0.49	7.5	0.00	Feb 13, 2023	Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-30990	Acronis Agent	Hig	0.49	7.5	0.01	May 18, 2022	Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Linux) before build 29240, Acronis Agent (Linux) before build 28037
CVE-2021-34800	Acronis Agent	Hig	0.49	7.5	0.01	Nov 29, 2021	Sensitive information could be logged. The following products are affected: Acronis Agent (Windows, Linux, macOS) before build 27147
CVE-2023-44212	Acronis Agent	Hig	0.46	7.1	0.00	Oct 5, 2023	Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 31477.
CVE-2023-45245	Acronis Agent	Med	0.36	5.5	0.00	Oct 6, 2023	Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36119.
CVE-2023-45240	Acronis Agent	Med	0.36	5.5	0.00	Oct 5, 2023	Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.
CVE-2023-44214	Acronis Agent	Med	0.36	5.5	0.00	Oct 5, 2023	Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.

CVE-2023-41744HigAug 31, 2023
Acronis
Acronis Cyber Protect 16 (Linux)
risk 0.51cvss 7.8epss 0.00
Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.
CVE-2022-45451HigAug 31, 2023
Acronis
Cyber Protect Home Office
risk 0.51cvss 7.8epss 0.00
Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build…
CVE-2022-45452HigMay 18, 2023
Acronis
Acronis Agent (Windows)
risk 0.51cvss 7.8epss 0.00
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-45455HigFeb 13, 2023
Acronis
Cyber Protect Home Office
risk 0.51cvss 7.8epss 0.00
Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-24113HigFeb 4, 2022
Acronis
True Image
risk 0.51cvss 7.8epss 0.00
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build…
CVE-2021-44204HigFeb 4, 2022
Acronis
Cyber Protect Home Office
risk 0.51cvss 7.8epss 0.00
Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build…
CVE-2023-41749HigAug 31, 2023
Acronis
Acronis Agent (Windows)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) before build 35979.
CVE-2023-41742HigAug 31, 2023
Acronis
Acronis Cyber Protect 16 (Linux)
risk 0.49cvss 7.5epss 0.00
Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.
CVE-2022-45459HigMay 18, 2023
Acronis
Acronis Agent (Windows)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-45458HigMay 18, 2023
Acronis
Acronis Cyber Protect 16 (Linux)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.
CVE-2022-45457HigMay 18, 2023
Acronis
Acronis Agent (Windows)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-45450HigMay 18, 2023
Acronis
Acronis Cyber Protect 16 (Linux)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984.
CVE-2022-45456HigApr 26, 2023
Acronis
Acronis Agent (Windows)
risk 0.49cvss 7.5epss 0.00
Denial of service due to unauthenticated API endpoint. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 30161.
CVE-2022-45454HigFeb 13, 2023
Acronis
Acronis Agent (Windows)
risk 0.49cvss 7.5epss 0.00
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984.
CVE-2022-30990HigMay 18, 2022
Acronis
Agent
risk 0.49cvss 7.5epss 0.01
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Linux) before build 29240, Acronis Agent (Linux) before build 28037
CVE-2021-34800HigNov 29, 2021
Acronis
Agent
risk 0.49cvss 7.5epss 0.01
Sensitive information could be logged. The following products are affected: Acronis Agent (Windows, Linux, macOS) before build 27147
CVE-2023-44212HigOct 5, 2023
Acronis
Agent
risk 0.46cvss 7.1epss 0.00
Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 31477.
CVE-2023-45245MedOct 6, 2023
Acronis
Agent
risk 0.36cvss 5.5epss 0.00
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 36119.
CVE-2023-45240MedOct 5, 2023
Acronis
Agent
risk 0.36cvss 5.5epss 0.00
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.
CVE-2023-44214MedOct 5, 2023
Acronis
Agent
risk 0.36cvss 5.5epss 0.00
Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 35739.

Page 1 of 2