Code injection

2021-08-0520:15:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

Acronis True Image prior to 2021 Update 4 for Windows and Acronis True Image prior to 2021 Update 5 for macOS allowed an unauthenticated attacker (who has a local code execution ability) to tamper with the micro-service API.

CPENameOperatorVersion
true_imageeq2021 update-3
true_imageeq2021 update-1
true_imageeq2021 update-2
true_imageeq2021
true_imageeq2021 update-1
true_imageeq2021 update-2
true_imageeq2021 update-3
true_imageeq2021
true_imageeq2021 update-4

Name	Operator	Version
true_image	eq	2021 update-3
true_image	eq	2021 update-1
true_image	eq	2021 update-2
true_image	eq	2021
true_image	eq	2021 update-1
true_image	eq	2021 update-2
true_image	eq	2021 update-3
true_image	eq	2021
true_image	eq	2021 update-4

References

kb.acronis.com/content/68413

kb.acronis.com/content/68419