Local Privilege Escalation in Acronis DeviceLock DLP

Executive Summary

This vulnerability is a local privilege escalation caused by an EXE hijacking issue in Acronis DeviceLock DLP (Windows) versions before build 9.0.15051.93227.

EXE hijacking typically involves an attacker placing a malicious executable in a location where a legitimate application mistakenly loads it, allowing the attacker to gain elevated privileges on the affected system.

Useful 0 Not Useful 0

Impact Analysis

An attacker exploiting this vulnerability can escalate their privileges locally on the affected system.

This means the attacker could gain higher-level access rights than originally permitted, potentially allowing them to execute arbitrary code with elevated permissions, compromise system integrity, and access sensitive data.

Useful 0 Not Useful 0