Vulnerability · Published Nov 29, 2021 · Assigned by Acronis
CVE-2021-44198DLL hijacking could lead to local privilege escalation
High 7.8
In plain English
A high-severity uncontrolled search path in Acronis Cyber Protect 15 from Acronis. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 17% of all known vulnerabilities).
Severity (CVSS NVD)7.8High
Exploit odds (30 days)0.3%top 82.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
DLL hijacking could lead to local privilege escalation. The following products are affected: Acronis Cyber Protect 15 (Windows) before build 28035
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Acronis | Acronis Cyber Protect 15 | unspecified – before 28035 |
Weakness: CWE-427
References
- https://security-advisory.acronis.com/advisories/SEC-2128 x_refsource_MISC