CVE-2020-10138 is a privilege escalation vulnerability affecting Acronis Cyber Backup 12.5 and Cyber Protect 15. It arises because an OpenSSL component within these products specifies an OPENSSLDIR variable in a user-creatable subdirectory, allowing an unprivileged Windows user to place a malicious openssl.cnf file. This can lead to arbitrary code execution with SYSTEM privileges. The vulnerability has a CVSS score of 7.8 (High), indicating a local attack vector with low complexity and requiring low privileges, but resulting in high impact to confidentiality, integrity, and availability. Its EPSS score is low, suggesting a low probability of exploitation. Currently, there is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. Community discussion and media coverage are minimal, with only one article from SecurityWeek reporting on the patch.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 12.5CPE matchmatch criteria | cpe:2.3:a:acronis:cyber_backup:*:*:*:*:*:*:*:* | ||
< 15CPE matchmatch criteria | cpe:2.3:a:acronis:cyber_protect:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.