CVE-2023-44209
CVSS 3.1 Score 7.8 of 10 (high)
Details
Published Oct 4, 2023
Updated: Oct 6, 2023
CWE ID 610
Summary
CVE-2023-44209 is a local privilege escalation vulnerability affecting Acronis Agent versions prior to build 29051 on Linux, macOS, and Windows operating systems. The weakness stems from improper soft link handling, allowing an attacker to gain elevated privileges on compromised systems. Successful exploitation of this vulnerability could lead to significant data compromise or unauthorized system access. Users are strongly advised to update their Acronis Agent software to the latest build as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Share
Affected Products
- Acronis Agent
Affected Vendors
- Acronis International