description: Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 36497, Acronis Cyber Protect 16 (Windows) before build 37391.
problem types: CWE-427
affected:
{
vendor: Acronis
product: Acronis Cyber Protect Cloud Agent
platforms: Windows
versions:
version: unspecified, status: affected, lessThan: 36497, versionType: semver
defaultStatus: unaffected
}
{
vendor: Acronis
product: Acronis Cyber Protect 16
platforms: Windows
versions:
version: unspecified, status: affected, lessThan: 37391, versionType: semver
defaultStatus: unaffected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_0: [
version: 3.0
baseScore: 6.6
baseSeverity: MEDIUM
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
]