CVE-2022-24114 — HIGH (7.0)

Vulnerability Description

Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (macOS) before build 39287

CVSS Score

7.0

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

Attack Vector

LOCAL

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality

HIGH

Integrity

HIGH

Availability

HIGH

Affected Products

Vendor	Product	Versions
Acronis	True Image	2021
Acronis	Cyber Protect Home Office	-
Apple	Macos	-

Related Weaknesses (CWE)

CWE-362

References

https://security-advisory.acronis.com/advisories/SEC-3316Vendor Advisory
https://security-advisory.acronis.com/advisories/SEC-3316Vendor Advisory

FAQ

What is CVE-2022-24114?

CVE-2022-24114 is a vulnerability with a CVSS score of 7.0 (HIGH). Local privilege escalation due to race condition on application startup. The following products are affected: Acronis Cyber Protect Home Office (macOS) before build 39605, Acronis True Image 2021 (mac...

How severe is CVE-2022-24114?

CVE-2022-24114 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-24114?

Check the references section above for vendor advisories and patch information. Affected products include: Acronis True Image, Acronis Cyber Protect Home Office, Apple Macos.