VULNERABILITY INTELLIGENCE

CVE-2024-34010

CVSS score8.2 HIGH
EPSS probability0.20%
CISA KEVNot currently listed
Published2024-04-29
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386, Acronis True Image OEM (Windows) before build 42575.

Weakness classification

  • security@acronis.com: CWE-428

Primary references