CVE-2021-44204

HIGH

Acronis True Image 2021 < 39287 - Local Privilege Escalation via Named Pipe

Title source: llm
STIX 2.1

Description

Local privilege escalation via named pipe due to improper access control checks. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035, Acronis Agent (Windows) before build 27147, Acronis Cyber Protect Home Office (Windows) before build 39612, Acronis True Image 2021 (Windows) before build 39287

References (1)

Core 1
Core References

Scores

CVSS v3 7.8
EPSS 0.0004
EPSS Percentile 13.6%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-285
Status published
Products (4)
acronis/agent < c21.06
acronis/cyber_protect 15 (3 CPE variants)
acronis/cyber_protect_home_office
acronis/true_image 2021 (6 CPE variants)
Published Feb 04, 2022
Tracked Since Feb 18, 2026