CVE-2023-48677: High severity Acronis Cyber Protect Home Office vulnerability
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows) before build 42575.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-48677?
CVE-2023-48677 has been classified as a local privilege escalation vulnerability.
How do I fix CVE-2023-48677?
To fix CVE-2023-48677, update Acronis Cyber Protect Home Office to build 40901 or Acronis Cyber Protect Cloud Agent to build 39378 or later.
Which products are affected by CVE-2023-48677?
CVE-2023-48677 affects Acronis Cyber Protect Home Office and Acronis Cyber Protect Cloud Agent on Windows systems.
What type of attack does CVE-2023-48677 enable?
CVE-2023-48677 enables local privilege escalation through DLL hijacking.
Is CVE-2023-48677 related to Microsoft Windows?
CVE-2023-48677 specifically affects Acronis products running on Microsoft Windows systems.