Vulnerabilities > CVE-2023-44213 - Unspecified vulnerability in Acronis Agent

CVSS 5.5 - MEDIUM

Attack vector

LOCAL

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

HIGH

Integrity impact

NONE

Availability impact

NONE

local

low complexity

acronis

NVD

Published: 2023-10-05

Updated: 2024-02-27

Summary

Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 35739, Acronis Cyber Protect 16 (Windows) before build 37391.

Vulnerable Configurations

Part	Description	Count
Application	Acronis Acronis Agent - Acronis Agent C21.03 Acronis Agent C21.06 Acronis Agent C21.07 Acronis Agent C21.09 Acronis Agent C21.10 Acronis Agent C21.12 Acronis Agent C22.02 Acronis Agent C22.03 Acronis Agent C22.05 Acronis Agent C22.07 Acronis Agent C22.08 Acronis Agent C22.09 Acronis Agent C22.10 Acronis Agent C22.11 Acronis Agent C23.02 Acronis Agent C23.03 Acronis Agent C23.05	18
OS	Microsoft Microsoft Windows -	1

References

https://security-advisory.acronis.com/advisories/SEC-5286