CVE-2021-44204
Local privilege escalation via named pipe due to improper access control checks
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 28035, 27147, 39612, 39287
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287
Timeline
- CVE published
- Record last updated
Affected versions
- Acronis Acronis Cyber Protect 15
fixed in 28035
- Acronis Acronis Agent
fixed in 27147
- Acronis Acronis Cyber Protect Home Office
fixed in 39612
- Acronis Acronis True Image 2021
fixed in 39287