This report was translated by AI; nobody has reviewed the translation yet. Original language: Slovak.
[TLP:CLEAR] Acronis Snap Deploy, Cyber Protect Cloud Agent and Home Office (Windows) fix 7 vulnerabilities
An authenticated local attacker can elevate their privileges in Cyber Protect Cloud Agent using the DLL hijacking technique [1][2][3][4].
The vulnerability is present in product:
- Acronis Cyber Protect Cloud Agent (Windows); <C25.01
CVSS: CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N
More information:
- CVE-2025-24828 at cve.org, NVD
- CVE-2025-24827 at cve.org, NVD
- CVE-2025-24829 at cve.org, NVD
- CVE-2025-24830 at cve.org, NVD
- CWE-426: Untrusted Search Path at cwe.mitre.org
The vulnerability was publicly disclosed 30. 1. 2025.
An authenticated local attacker can elevate their privileges in Cyber Protect Cloud Agent and Home Office using the DLL hijacking technique [5]
The vulnerability is present in products:
- Acronis Cyber Protect Cloud Agent (Windows); <C25.01
- Acronis Cyber Protect Home Office (Windows); <build 40901
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2023-48677 at cve.org, NVD
- CWE-427: Uncontrolled Search Path Element at cwe.mitre.org
The vulnerability was publicly disclosed 30. 1. 2025.
An authenticated local attacker can elevate their privileges in Cyber Protect Cloud Agent by entering a specially crafted search [6].
The vulnerability is present in product:
- Acronis Cyber Protect Cloud Agent (Windows); <C25.01
CVSS: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:N
More information:
- CVE-2025-24831 at cve.org, NVD
- CWE-428: Unquoted Search Path or Element at cwe.mitre.org
The vulnerability was publicly disclosed 30. 1. 2025.
An authenticated local attacker can elevate their privileges in Snap Deploy due to incorrect access settings on a folder [7].
The vulnerability is present in product:
- Acronis Snap Deploy (Windows); <build 4625;
CVSS: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
More information:
- CVE-2025-24826 at cve.org, NVD
- CWE-276: Incorrect Default Permissions at cwe.mitre.org
The vulnerability was publicly disclosed 28. 1. 2025.
Links
- [1] https://security-advisory.acronis.com/advisories/SEC-7842
- [2] https://security-advisory.acronis.com/advisories/SEC-7841
- [3] https://security-advisory.acronis.com/advisories/SEC-7839
- [4] https://security-advisory.acronis.com/advisories/SEC-7829
- [5] https://security-advisory.acronis.com/advisories/SEC-5620
- [6] https://security-advisory.acronis.com/advisories/SEC-6153
- [7] https://security-advisory.acronis.com/advisories/SEC-6436
By CESNET, z.s.p.o. Martin Krajči on 5. 2. 2025.