CVE-2024-8766

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-8766
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38235, Acronis Cyber Protect 16 (Windows) before build 39169.

6.7 /10

CVSS v3 : MEDIUM

V3 Legend

Vector : AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability : 0.8 / Impact : 5.9

Attack Vector LOCAL

Attack Complexity HIGH

Privileges Required LOW

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References
Link Resource
https://security-advisory.acronis.com/advisories/SEC-7218
Configurations

No configuration.

History

02 Jan 2025, 16:15

Type Values Removed Values Added
Summary (en) Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38235. (en) Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 38235, Acronis Cyber Protect 16 (Windows) before build 39169.

20 Sep 2024, 12:31

Type Values Removed Values Added
Summary
  • (es) Escalada de privilegios locales debido a una vulnerabilidad de secuestro de DLL. Los siguientes productos están afectados: Acronis Cyber Protect Cloud Agent (Windows) antes de la compilación 38235.

16 Sep 2024, 20:15

Type Values Removed Values Added
New CVE
Information

Published : 2024-09-16 20:15

Updated : 2025-01-02 16:15

NVD link : CVE-2024-8766

Mitre link : CVE-2024-8766

CVE.ORG link : CVE-2024-8766

JSON object : View

Products Affected

No product.

CWE
CWE-427

Uncontrolled Search Path Element