Local Privilege Escalation in Acronis Cyber Protect Cloud Agent for Windows
CVE-2025-24830

7HIGH

Key Information:

Vendor
Acronis
Status
Acronis Cyber Protect Cloud Agent
Vendor
CVE Published:
31 January 2025

Summary

Acronis Cyber Protect Cloud Agent for Windows is impacted by a local privilege escalation issue stemming from DLL hijacking vulnerabilities. Attackers could potentially exploit this vulnerability to gain elevated privileges on affected systems, compromising security measures and allowing unauthorized actions.

Affected Version(s)

Acronis Cyber Protect Cloud Agent Windows < 39378

References

https://security-advisory.acronis.com/advisories/SEC-7829
vendor-advisory

CVSS V3.1

Score:
7
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
High
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

@cyberexplorer (https://hackerone.com/cyberexplorer)
.