CVE-2023-41743

State: Published
Severity: 8.8 High
Published: Aug 31, 2023
Updated: Apr 10, 2026
Reserved: Aug 31, 2023

Description

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Protect Cloud Agent (Windows) before build 31637, Acronis Cyber Protect 15 (Windows) before build 35979, Acronis True Image OEM (Windows) before build 42575.

Scores

CVSS	Score	Vector	Source
3.0	8.8 High	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	Acronis

Weaknesses

CWE-269

Affected Products

Product	Versions
Acronis Cyber Protect Home OfficeAcronis	before 40278Affected
Acronis Cyber Protect Cloud AgentAcronis	before 31637Affected
Acronis Cyber Protect 15Acronis	before 35979Affected
Acronis True Image OEMAcronis	before 42575Affected

References

SEC-5487vendor-advisory
SEC-4858related

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.