1. Home
  2. CVE Database
  3. CVE-2023-41742
HIGH · 7.5

CVE-2023-41742

Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, m...

Vulnerability Description

Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
AcronisAgent< c22.09
AcronisCyber Protect15
AppleMacos-
LinuxLinux Kernel-
MicrosoftWindows-

Related Weaknesses (CWE)

CWE-668CWE-1327

References

FAQ

What is CVE-2023-41742?

CVE-2023-41742 is a vulnerability with a CVSS score of 7.5 (HIGH). Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, m...

How severe is CVE-2023-41742?

CVE-2023-41742 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-41742?

Check the references section above for vendor advisories and patch information. Affected products include: Acronis Agent, Acronis Cyber Protect, Apple Macos, Linux Linux Kernel, Microsoft Windows.