Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2022-24113 Details

Description

Local privilege escalation due to excessive permissions assigned to child processes. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

Metrics

CVSS 3.x Severity and Vector Strings:

NIST: [email protected]CVSS-B:7.8 HIGHVector:CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
https://security-advisory.acronis.com/advisories/SEC-2881 CVEVendor Advisory
https://security-advisory.acronis.com/advisories/SEC-2881 [email protected]Vendor Advisory

Weakness Enumeration

CWE-IDCWE NameSource
CWE-276Incorrect Default Permissions[email protected]
CWE-250Execution with Unnecessary Privileges[email protected]

Affected Products

ProductVersions
acronis agent
< c21.06

CPE

  • cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
acronis cyber protect
15 -
15 update1
15 update2

CPE

  • cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*
  • cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*
  • cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*

Remediation

  • No remediation found in references.
acronis cyber protect home office
All versions

CPE

  • cpe:2.3:a:acronis:cyber_protect_home_office:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
microsoft windows
All versions

CPE

  • cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.
acronis true image
2021 -
2021 update_1
2021 update_2
2021 update_3
2021 update_4

CPE

  • cpe:2.3:a:acronis:true_image:2021:-:*:*:*:windows:*:*
  • cpe:2.3:a:acronis:true_image:2021:update_1:*:*:*:windows:*:*
  • cpe:2.3:a:acronis:true_image:2021:update_2:*:*:*:windows:*:*
  • cpe:2.3:a:acronis:true_image:2021:update_3:*:*:*:windows:*:*
  • cpe:2.3:a:acronis:true_image:2021:update_4:*:*:*:windows:*:*
  • cpe:2.3:a:acronis:true_image:2021:update_5:*:*:*:windows:*:*

Remediation

  • No remediation found in references.

Change History

4 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2022-24113
NVD Published Date:
Feb 4, 2022
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2022-24113 Details - Not Deferred