Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40077.

Metrics

No CVSS v4.0

No CVSS v3.1

Attack Vector Network

Attack Complexity Low

Privileges Required None

Scope Unchanged

Confidentiality Impact None

Integrity Impact None

Availability Impact High

User Interaction None

No CVSS v2

This CVE is not in the KEV list.

The EPSS score is 0.00098.

Exploitation none

Automatable yes

Technical Impact partial

Affected Vendors & Products

No data.

No data.

No data.

No data.

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References
Link Providers
https://security-advisory.acronis.com/advisories/SEC-8646 cve-icon cve-icon
History

Wed, 04 Jun 2025 13:15:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Wed, 04 Jun 2025 12:15:00 +0000

Type Values Removed Values Added
Description Denial of service due to improper handling of malformed input. The following products are affected: Acronis Cyber Protect Cloud Agent (Linux, macOS, Windows) before build 40077.
Weaknesses CWE-1286
References
Metrics cvssV3_0

{'score': 7.5, 'vector': 'CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H'}
cve-icon MITRE

Status: PUBLISHED

Assigner: Acronis

Published:

Updated: 2025-06-04T13:10:54.369Z

Reserved: 2025-03-21T21:04:39.511Z

Link: CVE-2025-30415

cve-icon Vulnrichment

Updated: 2025-06-04T13:10:50.285Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2025-06-04T12:15:20.703

Modified: 2025-06-04T14:54:33.783

Link: CVE-2025-30415

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.