CVE-2023-44213
CVSS 3.1 Score 5.5 of 10 (medium)
Details
Summary
CVE-2023-44213 is a sensitive information disclosure vulnerability affecting Acronis Cyber Protect Cloud Agent (Windows) versions prior to build 35739 and Acronis Cyber Protect 16 (Windows) builds below 37391. This issue arises due to excessive data collection, enabling attackers to gain access to sensitive system information. By exploiting this vulnerability, cybercriminals could potentially obtain valuable details about a system's configuration and setup, increasing the risk of unauthorized access or further attacks. Organizations using these affected Acronis products are advised to update as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Acronis Agent
Affected Vendors
- Acronis International
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions