PT-2025-5585 · Acronis · Acronis Cyber Protect Cloud Agent
CVSS v3.1
7.0
High
| Vector | AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
Acronis Cyber Protect Cloud Agent (Windows) versions prior to build 39378
Description
The issue is related to a local privilege escalation due to a DLL hijacking vulnerability. This vulnerability affects Acronis Cyber Protect Cloud Agent (Windows).
Recommendations
For versions prior to build 39378, update to build 39378 or later to resolve the issue. As a temporary workaround, consider restricting access to vulnerable system components to minimize the risk of exploitation.
Fix
LPE
Untrusted Search Path
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Acronis Cyber Protect Cloud Agent