CVE-2024-49383

Medium

Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected:…

Acronis·CWE-1327·Published 2024-10-15

CVSS

4.3

EPSS

0.00

KEV

Exploits

Vendor statements (1)

security-advisory.acronis.com

cve.orgen

194 chars

Excessive attack surface in acep-importer service due to binding to an unrestricted IP address. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 38690.

NVDes

236 chars

Superficie de ataque excesiva en el servicio acep-importer debido a la vinculación a una dirección IP sin restricciones. Los siguientes productos se ven afectados: Acronis Cyber Protect 16 (Linux, Windows) antes de la compilación 38690.

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
3.0	Primary	cve.org	3.5	—	—	CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
3.0	Secondary	NVD	3.5	2.1	1.4	CVSS:3.0/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
3.1	Primary	NVD	4.3	2.8	1.4	CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N