CVE-2022-3405

Опубликовано: 03 мая 2023

Источник: nvd

CVSS3: 9.3

CVSS3: 8.8

EPSS Средний

Описание

Code execution and sensitive information disclosure due to excessive privileges assigned to Acronis Agent. The following products are affected: Acronis Cyber Protect 15 (Windows, Linux) before build 29486, Acronis Cyber Backup 12.5 (Windows, Linux) before build 16545.

Ссылки

https://herolab.usd.de/security-advisories/usd-2022-0008/
Exploit
Third Party Advisory
https://security-advisory.acronis.com/advisories/SEC-4092
Vendor Advisory
https://herolab.usd.de/security-advisories/usd-2022-0008/
Exploit
Third Party Advisory
https://security-advisory.acronis.com/advisories/SEC-4092
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:a:acronis:cyber_backup:12.5:-:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:10130:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:10330:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:11010:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:13160:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:13400:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:14280:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:14330:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:16180:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:16318:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:16327:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:7641:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:7970:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:8850:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_backup:12.5:9010:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*

cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:*

Одно из

cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:*

cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.32194

Средний

9.3 Critical

CVSS3

8.8 High

CVSS3

Дефекты

CWE-269

NVD-CWE-noinfo

Связанные уязвимости

GHSA-wrh2-hv24-w22w

CVSS3: 9.3

github

почти 3 года назад

EPSS

Процентиль: 97%

0.32194

Средний

9.3 Critical

CVSS3

8.8 High

CVSS3

Дефекты

CWE-269

NVD-CWE-noinfo