High severity · published Dec 12, 2023
CVE-2023-48677
Local privilege escalation due to DLL hijacking vulnerability
7.8
CVSS
0.2%
EPSS
No
On KEV
Description
Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40901, Acronis Cyber Protect Cloud Agent (Windows) before build 39378, Acronis Cyber Protect 16 (Windows) before build 39938, Acronis True Image OEM (Windows) before build 42575.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Acronis Cyber Protect 16 · Acronis
before 39938 · source: vendor
AC
Acronis Cyber Protect Cloud Agent · Acronis
before 39378 · source: vendor
AC
Acronis Cyber Protect Home Office · Acronis
before 40901 · source: vendor
AT
Acronis True Image OEM · Acronis
before 42575 · source: vendor
CP
Cyber Protect Home Office · Acronis
before 40901 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2023-48677
CVE.org
https://www.cve.org/CVERecord?id=CVE-2023-48677
Vendor Advisory
https://security-advisory.acronis.com/advisories/SEC-5620
More from Acronis Cyber Protect 16
10.0
CVE-2025-30416
Sensitive data disclosure and manipulation due to missing authorization
10.0
CVE-2025-30412
Sensitive data disclosure and manipulation due to improper authentication
10.0
CVE-2025-30411
Sensitive data disclosure and manipulation due to improper authentication
9.8
CVE-2025-30410
Sensitive data disclosure and manipulation due to missing authentication
9.1
CVE-2024-49388
Sensitive information manipulation due to improper authorization