High severity · published Dec 12, 2023
CVE-2023-48677
Local privilege escalation due to DLL hijacking vulnerability
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows) before build 42575.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CP
Cyber Protect Home Office · Acronis
before 40901 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-48677
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-48677
Vendor Advisory
https://security-advisory.acronis.com/advisories/SEC-5620
More from Cyber Protect Home Office
9.1
CVE-2023-44208
Sensitive information disclosure and manipulation due to missing authorization
7.8
CVE-2022-46869
Local privilege escalation during installation due to improper soft link handling
7.8
CVE-2023-41743
Local privilege escalation due to insecure driver communication port permissions
7.8
CVE-2022-46868
Local privilege escalation during recovery due to improper soft link handling
7.8
CVE-2022-45451
Local privilege escalation due to insecure driver communication port permissions