CVE-2023-41743

published 2023-08-31

CVE-2023-41743: Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office…

Priority P3 40 high 7.8 CVSS 3.1

AV L AC L PR L UI N S U C H I H A H

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Protect Cloud Agent (Windows) before build 31637, Acronis Cyber Protect 15 (Windows) before build 35979, Acronis True Image OEM (Windows) before build 42575.

Affected

10 ranges

Vendor	Product	Version range	Fixed in
acronis	acronis_cyber_protect_15	>= unspecified < 35979	35979
acronis	acronis_cyber_protect_cloud_agent	>= unspecified < 31637	31637
acronis	acronis_cyber_protect_home_office	>= unspecified < 40278	40278
acronis	acronis_true_image_oem	>= unspecified < 42575	42575
acronis	agent	< c23.02	c23.02
acronis	cyber_protect	—	—
acronis	cyber_protect_home_office	—	—
acronis	cyber_protect_home_office	—	—
acronis	cyber_protect_home_office	—	—
acronis	cyber_protect_home_office	—	—

CVSS provenance

nvd v3.1 7.8 HIGH CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

nvd v3.0 8.8 HIGH CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269