cbcvebase.
CVE-2022-45455
published 2023-02-13

CVE-2022-45455: Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before…

PriorityP338high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
EPSS
0.15%
4.5th percentile
Local privilege escalation due to incomplete uninstallation cleanup. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40107, Acronis Agent (Windows) before build 30025, Acronis Cyber Protect 15 (Windows) before build 30984.

Affected

5 ranges
VendorProductVersion rangeFixed in
acronisacronis_agent>= unspecified < 3002530025
acronisacronis_cyber_protect_15>= unspecified < 3098430984
acronisacronis_cyber_protect_home_office>= unspecified < 4010740107
acronisagent< c22.07c22.07
acroniscyber_protect

CVSS provenance

nvdv3.17.8HIGHCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv3.06.6MEDIUMCVSS:3.0/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:L/A:L
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.