CVE-2023-48677highCWE-427

CVE-2023-48677: high-severity vulnerability in Acronis Cyber Protect Home Office

Published · Updated

Follow this CVE+ Monitor Acronis Cyber Protect+ Monitor Acronis Cyber Protect Cloud Agent

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 7.3epss 0.2%
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows) before build 42575.
CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
Affected products
Acronis · Acronis Cyber Protect 16Acronis · Acronis Cyber Protect Cloud AgentAcronis · Acronis Cyber Protect Home OfficeAcronis · Acronis True Image OEM
Related CVEs — Acronis Cyber Protect Home Office

In the same product, most dangerous first.

CVE-2025-30411CRITICALCVE-2025-30411EPSS 0.8%CVE-2025-30410CRITICALCVE-2025-30410EPSS 0.7%CVE-2025-30412CRITICALCVE-2025-30412EPSS 0.7%CVE-2022-45451HIGHCVE-2022-45451EPSS 0.5%CVE-2025-30416CRITICALCVE-2025-30416EPSS 0.5%CVE-2025-30415HIGHCVE-2025-30415EPSS 0.4%