High severity · published Feb 4, 2022
CVE-2022-24113
Local privilege escalation due to excessive permissions assigned to child processes
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 11% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AG
Agent · Acronis
before c21.06 · source: NVD
CP
Cyber Protect · Acronis
15; 15; 15 · source: NVD
CP
Cyber Protect Home Office · Acronis
All versions, or not specified · source: NVD
TI
True Image · Acronis
2021; 2021; 2021; 2021; 2021; 2021 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-24113
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-24113
Vendor Advisory
https://security-advisory.acronis.com/advisories/SEC-2881
More from Agent
7.8
CVE-2026-28727
Local privilege escalation due to insecure Unix socket permissions
7.8
CVE-2023-44209
Local privilege escalation due to improper soft link handling
7.8
CVE-2023-41744
Local privilege escalation due to unrestricted loading of unsigned libraries
7.8
CVE-2023-41743
Local privilege escalation due to insecure driver communication port permissions
7.8
CVE-2022-45451
Local privilege escalation due to insecure driver communication port permissions