description: Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40173, Acronis Agent (Windows) before build 30600, Acronis Cyber Protect 15 (Windows) before build 30984.
problem types: CWE-269
affected:
{
vendor: Acronis
product: Acronis Cyber Protect Home Office
platforms: Windows
versions:
version: unspecified, status: affected, lessThan: 40173, versionType: semver
defaultStatus: unaffected
}
{
vendor: Acronis
product: Acronis Agent
platforms: Windows
versions:
version: unspecified, status: affected, lessThan: 30600, versionType: semver
defaultStatus: unaffected
}
{
vendor: Acronis
product: Acronis Cyber Protect 15
platforms: Windows
versions:
version: unspecified, status: affected, lessThan: 30984, versionType: semver
defaultStatus: unaffected
}
metrics:
format: CVSS
scenarios: GENERAL
cvssV3_0: [
version: 3.0
baseScore: 8.8
baseSeverity: HIGH
vectorString: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
]