PT-2024-5393 · Acronis · Acronis True Image

Redwise · Published 2024-04-29 · Updated 2024-07-19 · CVE-2024-34013

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Acronis True Image (macOS) versions before build 41396

Description The issue is related to a local privilege escalation due to an OS command injection vulnerability. This vulnerability may allow an attacker to elevate their privileges. The estimated number of potentially affected devices worldwide is not specified.

Recommendations For Acronis True Image (macOS) versions before build 41396, update to a version after build 41396 to resolve the issue. At the moment, there is no information about additional mitigation measures for this vulnerability.

Fix

OS Command Injection

Weakness Enumeration

CWE-78

Related Identifiers

BDU:2024-06027

CVE-2024-34013

Affected Products

Acronis True Image

References · 7

• https://bdu.fstec.ru/vul/2024-06027 · Security Note
• https://security-advisory.acronis.com/advisories/SEC-7035 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-34013 · Security Note
• https://t.me/cvenotify/86611 · Telegram Post
• https://t.me/cvenotify/86725 · Telegram Post
• https://t.me/cvedetector/1152 · Telegram Post
• https://vuldb.com/ru/?id.271890 · Note