Acronis Agent vulnerabilities

14 known vulnerabilities in Acronis Agent from Acronis. 14 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  Acronis Agent: Missing Authorization

  CVE-2023-44212Oct 5, 2023Acronis

  Sensitive information disclosure and manipulation due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 31477.

• 7.5 High severity

  Acronis Agent: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2023-41749Aug 31, 2023Acronis

  Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Windows) before build 32047, Acronis Cyber Protect 15 (Windows) before build 35979.

• 7.8 High severity

  Acronis Agent: Improper Verification of Cryptographic Signature

  CVE-2023-41744Aug 31, 2023Acronis

  Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.

• 7.5 High severity

  Acronis Agent: Exposure of Resource to Wrong Sphere

  CVE-2023-41742Aug 31, 2023Acronis

  Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.

• 7.8 High severity

  Acronis Cyber Protect Home Office: Improper Privilege Management

  CVE-2022-45451Aug 31, 2023Acronis

  Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows

• 7.5 High severity

  Acronis Agent: Incorrect Default Permissions

  CVE-2022-45459May 18, 2023Acronis

  Sensitive information disclosure due to insecure registry permissions. The following products are affected: Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.

• 7.5 High severity

  Acronis Agent: Improper Certificate Validation

  CVE-2022-45458May 18, 2023Acronis

  Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows, macOS, Linux) before build 29633, Acronis Cyber Protect 15 (Windows, macOS, Linux) before build 30984.

• 7.5 High severity

  Acronis Agent: Improper Certificate Validation

  CVE-2022-45457May 18, 2023Acronis

  Sensitive information disclosure and manipulation due to improper certification validation. The following products are affected: Acronis Agent (Windows) before build 29633, Acronis Cyber Protect 15 (Windows) before build 30984.

• 7.8 High severity

  Acronis Agent: Incorrect Default Permissions

  CVE-2022-45452May 18, 2023Acronis

  Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber Protect 15 (Windows) before build 30984.

• 7.5 High severity

  Acronis Agent: Files or Directories Accessible to External Parties

  CVE-2022-45450May 18, 2023Acronis

  Sensitive information disclosure and manipulation due to improper authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 28610, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 30984.

• 7.8 High severity

  Acronis Cyber Protect Home Office: Incomplete Cleanup

  CVE-2022-45455Feb 13, 2023Acronis

  Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before buil

• 7.5 High severity

  Acronis Agent: Incorrect Default Permissions

  CVE-2022-45454Feb 13, 2023Acronis

  Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30161, Acronis Cyber Protect 15 (Windows) before build 30984.

• 7.5 High severity

  Acronis Cyber Protect 15: Incorrect Permission Assignment for Critical Resource

  CVE-2022-30990May 18, 2022Acronis

  Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 15 (Linux) before build 29240, Acronis Agent (Linux) before build 28037

• 7.8 High severity

  Acronis Cyber Protect 15: Incorrect Default Permissions

  CVE-2022-24113Feb 4, 2022Acronis

  Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Wind