CVE-2022-46868

CVSS 3.1 Score 7.8 of 10 (high)

Details

Published Aug 31, 2023
Updated: Sep 7, 2023
CWE ID 610

Summary

CVE-2022-46868 is a local privilege escalation vulnerability affecting Acronis Cyber Protect Home Office for Windows prior to build 40173. This issue arises due to improper handling of soft links during recovery processes, allowing an attacker to elevate their privileges and gain unauthorized access to sensitive system data or make unintended modifications. Successful exploitation of this vulnerability could lead to significant security consequences and potential data loss for affected users. It is recommended that users update their software to the latest build to mitigate this risk.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share

Affected Products

  • Acronis Cyber Protect Home Office

Affected Vendors

  • Acronis International