WID-SEC-W-2025-1249

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Acronis Cyber Protect: Mehrere Schwachstellen

view advisory published 2025-06-04

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Rechte zu erweitern.

01

describes (7)

Related CVEs.

IDseverity exploitable
CVE-2025-30416US—OT elevated—
Sensitive data disclosure and manipulation due to missing authorization. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acronis…
CVE-2025-30412US——
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acroni…
CVE-2025-30411US——
Sensitive data disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 39938, Acroni…
CVE-2025-30410US—OT elevated—
Sensitive data disclosure and manipulation due to missing authentication. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before buil…
CVE-2025-48962US——
Sensitive information disclosure due to SSRF. The following products are affected: Acronis Cyber Protect 16 (Windows, Linux) before build 39938.
CVE-2025-48961US——
Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Windows) before build 39938.
CVE-2025-48960US——
Weak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 (Linux, macOS, Windows) before build 39938.
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan