CVE-2023-41743

HighCVSS 7.8/10Last modified Jun 17, 2026

Description

Local privilege escalation due to insecure driver communication port permissions. The following products are affected: Acronis Cyber Protect Home Office (Windows) before build 40278, Acronis Cyber Protect Cloud Agent (Windows) before build 31637, Acronis Cyber Protect 15 (Windows) before build 35979, Acronis True Image OEM (Windows) before build 42575.

Metrics

CVSS 3.1 7.8/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-269

Affected software

No affected versions have been published.

Timeline

Published: Aug 31, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-417447.8Local privilege escalation due to unrestricted loading of unsigned libraries. The following products are affected: Acronis Agent (macOS) bef CVE-2023-417455.5Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Linu CVE-2023-417469.8Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build CVE-2023-417476.5Sensitive information disclosure due to unauthenticated path traversal. The following products are affected: Acronis Cloud Manager (Windows)CVE-2023-417489.8Remote command execution due to improper input validation. The following products are affected: Acronis Cloud Manager (Windows) before build CVE-2023-417497.5Sensitive information disclosure due to excessive collection of system information. The following products are affected: Acronis Agent (Wind CVE-2023-41756.1A vulnerability was found in mooSocial mooTravel 3.1.8 and classified as problematic. Affected by this issue is some unknown functionality. CVE-2023-417505.5Sensitive information disclosure due to missing authorization. The following products are affected: Acronis Agent (Linux, macOS, Windows) be CVE-2023-417515.5Sensitive information disclosure due to improper token expiration validation. The following products are affected: Acronis Agent (Windows) b CVE-2023-417527.5Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Traffic Server.This issue affects Apache Traffic Server: CVE-2023-41769.8A vulnerability was found in SourceCodester Hospital Management System 1.0. It has been classified as critical. This affects an unknown part CVE-2023-417635.3Skype for Business Elevation of Privilege Vulnerability