CVE-2023-48677
Local privilege escalation due to DLL hijacking vulnerability.
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Not listed in CISA KEV
- Fix
- Fixed in 40901, 39378, 39938, 42575
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows) before build 42575.
Timeline
- CVE published
- Record last updated
Affected versions
- Acronis Acronis Cyber Protect Home Office
fixed in 40901
- Acronis Acronis Cyber Protect Cloud Agent
fixed in 39378
- Acronis Acronis Cyber Protect 16
fixed in 39938
- Acronis Acronis True Image OEM
fixed in 42575