CVE-2024-34010

Published: Apr 29, 2024Modified: Apr 10, 2026

8.2

Vector

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Exploitability: 1.5 / Impact: 6.0

Source: security@acronis.com (Secondary)

Description

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386, Acronis True Image OEM (Windows) before build 42575.

Related CWEs

CWE-428

Unquoted Search Path or Element

The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.

References (2)

https://security-advisory.acronis.com/advisories/SEC-7110

Source: security@acronis.com

https://security-advisory.acronis.com/advisories/SEC-7110

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.