CVE-2023-41742

High

Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS,…

Acronis·CWE-1327·Published 2023-08-31

CVSS

7.5

EPSS

0.01

KEV

Exploits

Vendor statements (1)

security-advisory.acronis.com

cve.orgen

234 chars

Excessive attack surface due to binding to an unrestricted IP address. The following products are affected: Acronis Agent (Linux, macOS, Windows) before build 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.

NVDes

283 chars

Superficie de ataque excesiva debido a la vinculación a una dirección IP no restringida. Los siguientes productos están afectados: Acronis Agent (Linux, macOS, Windows) anterior a la compilación 30430, Acronis Cyber Protect 15 (Linux, macOS, Windows) anterior a la compilación 35979.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	4.3	—	—	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.0	Secondary	NVD	4.3	2.8	1.4	CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	NVD	7.5	3.9	3.6	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N