CVE-2022-45452 HIGH

CVE-2022-45452

Vendor Acronis

Product Acronis Agent

Weakness CWE-269

Published May 18, 2023

Last update January 22, 2025

View on NVD All CVEs

CVSS base score

7.3/10

Attack vector Local

Attack complexity Low

Privileges required Low

User interaction Required

Confidentiality High

Integrity High

CVSS vector

CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

What the vulnerability does

01Description

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Agent (Windows) before build 30430, Acronis Cyber Protect 15 (Windows) before build 30984.

Key dates

02Disclosure timeline

May 18, 2023 CVE published

January 22, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2022-45452 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/269.html

Related vulnerabilities

Identifiers

CVE CVE-2022-45452

CWE CWE-269

CVSS 7.3 / HIGH

Affected versions

Vendor Acronis

Product Acronis Agent

Affected ≥ unspecified and < 30430

Vendor Acronis

Product Acronis Cyber Protect 15

Affected ≥ unspecified and < 30984

CVE-2022-45452

01Description

02Disclosure timeline

03References

04Related CVE