CVE-2017-3219

2017-06-2120:00:00

CWE-311

certcc

www.cve.org

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

33.0%

JSON

Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash.

CNA Affected

[
  {
    "product": "True Image",
    "vendor": "Acronis",
    "versions": [
      {
        "status": "affected",
        "version": "unspecified"
      }
    ]
  }
]

References

www.securityfocus.com/bid/99128

www.kb.cert.org/vuls/id/489392