Thursday, October 15, 2020

Vulnerabilities In Acronis Backup Software

There have been found privilege escalation vulnerabilities (CVE-2020-10138, CVE-2020-10139 and CVE-2020-10140) in Acronis True Image, Cyber Backup and Cyber Protection backup software. By exploiting the vulnerabilities an unprivileged Windows user is able to run arbitrary code with SYSTEM privileges.

Affected versions
Acronis True Image 2021 earlier than build 32010
Acronis Cyber Backup 12.5 earlier than build 16363
Acronis Cyber Protect 15 earlier than build 24600


More information here.

No comments: