Skip to main content

Cyber Protect CVE-2023-44152

CRITICAL
Missing Authentication for Critical Function (CWE-306)
2023-09-27 security@acronis.com
Microsoft Apple Information Disclosure Authentication Bypass Cyber Protect
9.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
9.1 CRITICAL
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
None

Lifecycle Timeline

1
CVE Published
Sep 27, 2023 - 15:19 nvd
CRITICAL 9.1

DescriptionNVD

Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979.

AnalysisAI

Sensitive information disclosure and manipulation due to improper authentication. Rated critical severity (CVSS 9.1), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Missing Authentication for Critical Function (CWE-306), which allows attackers to access critical functionality without authentication. Sensitive information disclosure and manipulation due to improper authentication. The following products are affected: Acronis Cyber Protect 15 (Linux, macOS, Windows) before build 35979. Affected products include: Acronis Cyber Protect.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Require authentication for all sensitive operations, implement defense in depth.

More in Cyber Protect

View all
CVE-2025-30412 CRITICAL
10.0 Feb 20

Second improper authentication in Acronis Cyber Protect 16. CVSS 10.0.
CVE-2025-30411 CRITICAL
10.0 Feb 20

Improper authentication in Acronis Cyber Protect 16. CVSS 10.0.
CVE-2025-30416 CRITICAL
10.0 Feb 20

Missing authorization in Acronis Cyber Protect 16 allows sensitive data access. CVSS 10.0.
CVE-2026-28710 CRITICAL
9.8 Mar 06

Improper authentication in Acronis Cyber Protect 17.
CVE-2024-49388 CRITICAL
9.1 Oct 15

Sensitive information manipulation due to improper authorization. Rated critical severity (CVSS 9.1), this vulnerability
CVE-2023-44206 CRITICAL
9.1 Sep 27

Sensitive information disclosure and manipulation due to improper authorization. Rated critical severity (CVSS 9.1), thi
CVE-2023-44154 HIGH
8.1 Sep 27

Sensitive information disclosure and manipulation due to improper authorization. Rated high severity (CVSS 8.1), this vu
CVE-2023-41743 HIGH
7.8 Aug 31

Local privilege escalation due to insecure driver communication port permissions. Rated high severity (CVSS 7.8), this v
CVE-2023-44157 HIGH
7.8 Sep 27

Local privilege escalation due to insecure folder permissions. Rated high severity (CVSS 7.8), this vulnerability is low
CVE-2023-41744 HIGH
7.8 Aug 31

Local privilege escalation due to unrestricted loading of unsigned libraries. Rated high severity (CVSS 7.8), this vulne
CVE-2021-44198 HIGH
7.8 Nov 29

DLL hijacking could lead to local privilege escalation. Rated high severity (CVSS 7.8), this vulnerability is no authent
CVE-2021-38088 HIGH
7.8 Aug 12

Acronis Cyber Protect 15 for Windows prior to build 27009 allowed local privilege escalation via binary hijacking. Rated

Same weakness CWE-306 – Missing Authentication for Critical Function

View all
CVE-2017-10271 HIGH POC
7.5
CVE-2025-3248 CRITICAL POC
9.8
CVE-2024-11680 CRITICAL POC
9.8
CVE-2025-0108 HIGH POC
8.8
CVE-2025-32433 CRITICAL POC
10.0
CVE-2016-2004 CRITICAL POC
9.8
CVE-2024-46506 CRITICAL POC
10.0
CVE-2025-8943 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5
CVE-2014-6324 HIGH POC
8.8
CVE-2023-7028 CRITICAL POC
10.0
CVE-2017-0213 HIGH POC
7.3

Share

CVE-2023-44152 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy