WID-SEC-W-2024-3181

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Acronis Cyber Protect: Mehrere Schwachstellen

view advisory published 2024-10-14

Ein Angreifer aus einem angrenzenden Netzwerk kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um Dateien zu manipulieren oder vertrauliche Informationen offenzulegen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2024-49388UScritical9.1—
Sensitive information manipulation due to improper authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVE-2024-49387UShigh7.5OT elevated—
Cleartext transmission of sensitive information in acep-collector service. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.
CVE-2024-49384USmedium4.3—
Excessive attack surface in acep-collector service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) befo…
CVE-2024-49383USmedium4.3—
Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) befor…
CVE-2024-49382USmedium4.3—
Excessive attack surface in archive-server service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) befo…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan