CVE-2024-49382
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Oct 15, 2024
Updated: Feb 4, 2025
CWE ID 1327
Summary
CVE-2024-49382 is a vulnerability affecting Acronis Cyber Protect 16 (Linux and Windows) versions prior to build 38690. This issue stems from the archive-server service binding to an unrestricted IP address, resulting in an excessive attack surface. An attacker could exploit this vulnerability to launch denial-of-service attacks or gain unauthorized access to the affected system, posing a significant threat to the security of the affected organization. It is crucial that users upgrade to the latest build to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Acronis Cyber Protect
Affected Vendors
- Acronis International