CVE-2023-41743CWE-269

Local privilege escalation due to insecure driver communication port permissions

High · published August 31, 2023

CVSS v3.0
8.8
EPSS
0%
Percentile
29.9
In the wild
Unconfirmed
What it is

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Protect Cloud Agent (Windows) before build 31637, Acronis Cyber Protect 15 (Windows) before build 35979, Acronis True Image OEM (Windows) before build 42575.

The record
Technical detail
CVSS v3.0
8.8 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00372 · 29.9th percentile
Weakness
CWE-269 · Improper Privilege Management
Published
2023-08-31T15:04Z
EPSS history
Timeline
  • 31 AUG 15:04Z
    Local privilege escalation due to insecure driver communication port permissions
    cvelistv5