CVE-2022-45451

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build 30984.

Affected

Acronis · Acronis Cyber Protect Home Office · Acronis Agent · Acronis Cyber Protect 15

CVSS v3.1 NVD

7.8 HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v3.0 ACRONIS

8.8 HIGHCVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS

0.51% chance of exploitation in the next 30 days, 42nd percentile

Published

2023-08-31

Updated

2024-10-01

Proof-of-concept exploits (1)

• alfarom256/CVE-2022-4545118★ · 2022-12-20

Security advisories

• https://security-advisory.acronis.com/SEC-5487
• https://security-advisory.acronis.com/advisories/SEC-4858

References

• CVE Record
• NVD entry

Related

• CVE-2021-21551
• CVE-2022-3699
• CVE-2023-32673