Lucene search

K
cveMitreCVE-2021-32581
HistoryAug 05, 2021 - 8:15 p.m.

CVE-2021-32581

2021-08-0520:15:09
CWE-295
mitre
web.nvd.nist.gov
26
4
cve-2021-32581
acronis true image
acronis agent
ssl validation
security vulnerability
nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

8

Confidence

High

EPSS

0.001

Percentile

49.7%

Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653, Acronis Cyber Protect prior to build 27009 did not implement SSL certificate validation.

Affected configurations

Nvd
Node
acroniscyber_protect_cloudRange<15.0.27009
OR
acroniscyber_protection_agentRange<15.0.26653
OR
acronistrue_imageMatch2021-macos
OR
acronistrue_imageMatch2021-windows
OR
acronistrue_imageMatch2021update_1macos
OR
acronistrue_imageMatch2021update_1windows
OR
acronistrue_imageMatch2021update_2macos
OR
acronistrue_imageMatch2021update_2windows
OR
acronistrue_imageMatch2021update_3macos
OR
acronistrue_imageMatch2021update_3windows
OR
acronistrue_imageMatch2021update_4macos
VendorProductVersionCPE
acroniscyber_protect_cloud*cpe:2.3:a:acronis:cyber_protect_cloud:*:*:*:*:*:*:*:*
acroniscyber_protection_agent*cpe:2.3:a:acronis:cyber_protection_agent:*:*:*:*:*:*:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:-:*:*:*:macos:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:-:*:*:*:windows:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_1:*:*:*:macos:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_1:*:*:*:windows:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_2:*:*:*:macos:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_2:*:*:*:windows:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_3:*:*:*:macos:*:*
acronistrue_image2021cpe:2.3:a:acronis:true_image:2021:update_3:*:*:*:windows:*:*
Rows per page:
1-10 of 111

Social References

More

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:P/A:N

CVSS3

8.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N

AI Score

8

Confidence

High

EPSS

0.001

Percentile

49.7%

Related for CVE-2021-32581