CVE-2024-49382: low-severity vulnerability in Acronis Cyber Protect 16
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
No sign of exploitation. No public exploitation artifact known so far.
The archive-server service in Acronis Cyber Protect 16 listens on all network interfaces instead of restricting access to specific addresses, allowing unauthorized network access to the service. This expands the potential attack surface by making the service accessible from unintended networks.
The archive-server component binds to an unrestricted IP address (0.0.0.0 or ::), enabling remote network access without proper segmentation. An attacker on the network can discover and probe the service, increasing exposure to potential exploitation of other vulnerabilities. Affects Acronis Cyber Protect 16 on Linux and Windows prior to build 38690.
In the same product, most dangerous first.