CVE-2022-30695

CVE-2022-30695 affects Acronis Snap Deploy for Windows. The vulnerability arises from excessive privileges granted to child processes, enabling local privilege escalation. Affected product: Acronis Snap Deploy (Windows) before build 3640. Root cause: overly permissive privileges assigned to child...

CVE-2022-30697

CVE-2022-30697 affects Acronis Snap Deploy for Windows before build 3640. Local privilege escalation due to insecure folder permissions on the host. CVSSv3.1 base score 7.8 (LOCAL, Privileges Required: LOW). No exploitation details are provided in the documents. Mitigation: upgrade to build 3640 ...

CVE-2022-30696

The CVE-2022-30696 issue affects Acronis Snap Deploy on Windows prior to build 3640. It is a DLL hijacking vulnerability that occurs when a process loads a DLL without specifying the absolute path, enabling local privilege escalation. The vulnerability is documented across multiple sources and is...

CVE-2024-34018

CVE-2024-34018 affects Acronis Snap Deploy for Windows, prior to build 4569. The root cause is insecure folder permissions that permit disclosure of sensitive information. Impact is described as a sensitive information disclosure with a local attack vector; the vulnerability is tied to the Window...

CVE-2023-2355

CVE-2023-2355 affects Acronis Snap Deploy on Windows prior to build 3900. The vulnerability is a DLL hijacking local privilege escalation that can grant high confidentiality/integrity/availability impact; root cause is DLL hijack in the deployment component. Mitigation: apply build 3900 or later ...

CVE-2024-34017

CVE-2024-34017 affects Acronis Snap Deploy on Windows prior to build 4569, caused by a DLL hijacking flaw that enables local privilege escalation. The vulnerability arises in the product’s handling of DLLs, allowing an attacker with local access and low privileges to escalate privileges (as descr...

CVE-2024-34019

CVE-2024-34019 involves a DLL hijacking local privilege escalation affecting Acronis Snap Deploy on Windows prior to build 4569. The Red Hat and NVD entries corroborate the same vulnerability description: local privilege escalation due to DLL hijacking, with affected software being Acronis Snap D...

CVE-2008-1410

CVE-2008-1410 affects Acronis Snap Deploy 2.0.0.1076 and earlier, where the PXE Server (pxesrv.exe) is vulnerable to directory traversal via the TFTP service. This allows remote attackers to read arbitrary files from the affected system. The vulnerability is documented with a CVSSv2 base score of...

CVE-2008-1411

The CVE-2008-1411 entry affects the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier. The issue is a denial of service (crash) caused by an incomplete TFTP request that triggers a NULL pointer dereference in the PXE server. This is the explicit vulnerability described in the ...