« Volver al listado

CVE-2023-41744

Estado: ModificadaAlta (7.8)—

Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Acronis — AgentAcronis — Cyber Protect

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2023-41744",
  "cveTags": [],
  "metrics": {
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "id": "CVE-2023-41744",
          "role": "CISA Coordinator",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "total"
            }
          ],
          "version": "2.0.3",
          "timestamp": "2024-10-01T17:22:05.776787Z"
        }
      }
    ],
    "cvssMetricV30": [
      {
        "type": "Secondary",
        "source": "security@acronis.com",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.0",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 7.8,
          "attackVector": "LOCAL",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
          "integrityImpact": "HIGH",
          "userInteraction": "NONE",
          "attackComplexity": "LOW",
          "availabilityImpact": "HIGH",
          "privilegesRequired": "LOW",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.9,
        "exploitabilityScore": 1.8
      }
    ]
  },
  "affected": [
    {
      "source": "security@acronis.com",
      "affectedData": [
        {
          "vendor": "Acronis",
          "product": "Acronis Agent",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "30600",
              "versionType": "semver"
            }
          ],
          "platforms": [
            "macOS"
          ],
          "defaultStatus": "unaffected"
        },
        {
          "vendor": "Acronis",
          "product": "Acronis Cyber Protect 15",
          "versions": [
            {
              "status": "affected",
              "version": "unspecified",
              "lessThan": "35979",
              "versionType": "semver"
            }
          ],
          "platforms": [
            "macOS"
          ],
          "defaultStatus": "unaffected"
        }
      ]
    },
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "affectedData": [
        {
          "cpes": [
            "cpe:2.3:a:acronis:agent:-:*:*:*:*:*:*:*"
          ],
          "vendor": "acronis",
          "product": "agent",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "30600",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unknown"
        },
        {
          "cpes": [
            "cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*"
          ],
          "vendor": "acronis",
          "product": "cyber_protect",
          "versions": [
            {
              "status": "affected",
              "version": "0",
              "lessThan": "35979",
              "versionType": "semver"
            }
          ],
          "defaultStatus": "unaffected"
        }
      ]
    }
  ],
  "published": "2023-08-31T16:15:10.343",
  "references": [
    {
      "url": "https://security-advisory.acronis.com/advisories/SEC-4728",
      "tags": [
        "Patch",
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "security@acronis.com"
    },
    {
      "url": "https://security-advisory.acronis.com/advisories/SEC-4728",
      "tags": [
        "Patch",
        "Release Notes",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Secondary",
      "source": "security@acronis.com",
      "description": [
        {
          "lang": "en",
          "value": "CWE-347"
        }
      ]
    },
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-347"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) before build 30600, Acronis Cyber Protect 15 (macOS) before build 35979."
    },
    {
      "lang": "es",
      "value": "Escalada de privilegios local debido a la carga sin restricciones de bibliotecas sin firmar. Los siguientes productos están afectados: Acronis Agent (macOS) antes de la compilación 30600, Acronis Cyber Protect 15 (macOS) antes de la compilación 35979."
    }
  ],
  "lastModified": "2026-06-17T06:22:44.120",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:acronis:agent:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "81FB9AF4-BC2B-46BE-A2B3-083CD57718FC",
              "versionEndExcluding": "c22.10"
            },
            {
              "criteria": "cpe:2.3:a:acronis:cyber_protect:15:-:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "89899D10-1343-4276-919A-9C1DF2DB8B55"
            },
            {
              "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update1:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A77B2499-B3A4-4278-BA0D-59AB59C60352"
            },
            {
              "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update2:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "BAF6A576-C320-4550-B7F8-4FCAE82FB06A"
            },
            {
              "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update3:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9740A956-D589-4846-8717-B6182EB65F8B"
            },
            {
              "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update4:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "9AB8B19B-2B40-4F1B-AE24-1C43D362E4BC"
            },
            {
              "criteria": "cpe:2.3:a:acronis:cyber_protect:15:update5:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "69506F27-DEF8-4317-9E54-D79CA430AD4B"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "387021A0-AF36-463C-A605-32EA7DAC172E"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "sourceIdentifier": "security@acronis.com"
}