DeutschShown in its original language — a full translation is planned for a future version.
Acronis Cyber Protect: Mehrere Schwachstellen
view advisory published 2025-01-02
Ein Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um seine Privilegien zu erhöhen, um Sicherheitsmechanismen zu umgehen und um einen Cross-Site Scripting Angriff durchzuführen.
01
describes (6)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-56414US | — | — | ||
Web installer integrity check used weak hash algorithm. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. | ||||
| CVE-2024-56413US | — | — | ||
Missing session invalidation after user deletion. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. | ||||
| CVE-2024-55543US | high7.8 | — | ||
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. | ||||
| CVE-2024-55542US | — | — | ||
Local privilege escalation due to excessive permissions assigned to Tray Monitor service. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) befo… | ||||
| CVE-2024-55541US | medium6.1 | — | ||
Stored cross-site scripting (XSS) vulnerability due to missing origin validation in postMessage. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) befo… | ||||
| CVE-2024-55540US | high7.8 | — | ||
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39169. | ||||
02
references
External citations — patches, advisories, analysis.
- Acronis Security Advisory SEC-1911 vom 2025-01-02external
- Acronis Security Advisory SEC-2245 vom 2025-01-02external
- Acronis Security Advisory SEC-3647 vom 2025-01-02external
- Acronis Security Advisory SEC-5342 vom 2025-01-02external
- Acronis Security Advisory SEC-6418 vom 2025-01-02external
- Acronis Security Advisory SEC-7612 vom 2025-01-02external
- WID-SEC-W-2025-0005 - CSAF Versionself
- WID-SEC-2025-0005 - Portal Versionself
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan