CVE-2022-45451

State: Published
Severity: 8.8 High
Published: Aug 31, 2023
Updated: Oct 1, 2024
Reserved: Nov 16, 2022

Description

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build 30984.

Scores

CVSS	Score	Vector	Source
3.0	8.8 High	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	Acronis

Weaknesses

CWE-269

Affected Products

Product	Versions
Acronis Cyber Protect Home OfficeAcronis	before 40173Affected
Acronis AgentAcronis	before 30600Affected
Acronis Cyber Protect 15Acronis	before 30984Affected

References

SEC-4858vendor-advisory
SEC-5487related

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.