PT-2021-9732 · Acronis · Acronis Agent

Published 2021-07-27 · Updated 2021-08-05 · CVE-2020-14999

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Acronis Agent versions 12.5.21540 through 12.5.23094

Description A logic bug in the system monitoring driver of Acronis Agent allowed bypassing Windows memory protection and accessing sensitive data.

Recommendations For Acronis Agent versions 12.5.21540 through 12.5.23094, update to version 12.5.23094 or later to resolve the issue.

Fix

Related Identifiers

CVE-2020-14999

Affected Products

Acronis Agent

References · 5

• https://osv.dev/vulnerability/CVE-2020-14999 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-14999 · Security Note
• https://acronis.com/en-us/support/updates/index.html · Vendor Advisory
• https://t.me/cvenotify/18729 · Telegram Post
• https://t.me/cibsecurity/26607 · Telegram Post