CVE-2023-45248
Assigner: Acronis
Published: 2023-10-09T11:08:37.009Z
State: PUBLISHED
problemTypes: descriptions: cweId: CWE-427
description: CWE-427
type: CWE
affected: vendor: Acronis
product: Acronis Cyber Protect Cloud Agent
platforms: Windows
versions: version: unspecified
status: affected
lessThan: 36497
versionType: semver
defaultStatus: unaffected
vendor: Acronis
product: Acronis Cyber Protect 16
platforms: Windows
versions: version: unspecified
status: affected
lessThan: 37391
versionType: semver
defaultStatus: unaffected
descriptions: value: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36497, Acronis Cyber Protect 16 (Windows) before build 37391.
metrics: format: CVSS
scenarios: value: GENERAL
cvssV3_0: version: 3.0
baseScore: 6.6
baseSeverity: MEDIUM
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N