Local Privilege Escalation Vulnerability in Acronis Cyber Protect Products
CVE-2024-8766
Currently unrated
Key Information:
- Vendor
- Acronis
- Vendor
- CVE Published:
- 16 September 2024
Summary
A vulnerability has been identified in Acronis Cyber Protect Cloud Agent and Acronis Cyber Protect 16 that allows local privilege escalation through DLL hijacking. This enables an attacker to exploit the system and gain unauthorized access, potentially leading to further security breaches. Users are advised to upgrade to the latest builds to mitigate these risks. For detailed information, please refer to the vendor advisory.
Affected Version(s)
Acronis Cyber Protect 16 Windows < 39169
Acronis Cyber Protect Cloud Agent Windows < 38235
References
Timeline
Vulnerability published
Credit
@satz4797 (https://hackerone.com/satz4797)