CVE-2025-48960 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
NIST	NIST	5.9 MEDIUM	ADJACENT_NETWORK	HIGH	NONE	CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
Acronis	CNA	5.9 MEDIUM				CVSS:3.0/AV:A/AC:H/PR:N/UI:N/S:U/C:L/I:H/A:N
CISA-ADP	ADP	---				---

Awaiting analysis

This vulnerability is currently awaiting analysis.

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Common Weakness Enumeration

CWE-326 - Inadequate Encryption Strength
The software stores or transmits sensitive data using an encryption scheme that is theoretically sound, but is not strong enough for the level of protection required.

Vulnerability Media Exposure

[GERMAN] Acronis Cyber Protect: Mehrere teils kritische Sicherheitslücken
In der Backup-Software Acronis Cyber Protect stopft der Hersteller mehrere teils höchst kritische Sicherheitslücken.
Published: 2025-06-05T13:24:00+00:00
[GERMAN] Acronis Cyber Protect: Mehrere Schwachstellen
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Acronis Cyber Protect ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Informationen offenzulegen oder Rechte zu erweitern.
Published: 2025-06-04T22:00:00+00:00

References

https://security-advisory.acronis.com/advisories/SEC-6403