What’s Vulnerable › Vulnerabilities

CVE-2023-41743

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-08-31 · updated 2026-06-17
• Weakness: CWE-269

Description

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Protect Cloud Agent (Windows) before build 31637, Acronis Cyber Protect 15 (Windows) before build 35979, Acronis True Image OEM (Windows) before build 42575.

Affected products

• Acronis Cyber Protect Cloud Agent: before c23.02 — fixed in c23.02
• Acronis Cyber Protect 15: 15, 15-update1, 15-update2, 15-update3, 15-update4, 15-update5
• Acronis Cyber Protect Home Office: 39900, 40107, 40173, 40208

How to fix

Upgrade to a fixed version: Acronis Cyber Protect Cloud Agent c23.02. Check the vendor advisory for mitigations.

References

• https://security-advisory.acronis.com/SEC-4858
• https://security-advisory.acronis.com/advisories/SEC-5487
• https://security-advisory.acronis.com/SEC-4858
• https://security-advisory.acronis.com/advisories/SEC-5487

Get alerted when CVE-2023-41743 or the next vulnerability affects your stack