Security Advisory

CVE-2020-10140

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-10-21 13:40:19

Last updated 2024-08-04 10:50:57

Assigner certcc

CVSS score 7.8

State PUBLISHED

Description

Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramData\Acronis, an unprivileged user can achieve arbitrary code execution with SYSTEM privileges by placing a DLL in one of several paths within C:\ProgramData\Acronis.

← Browse all CVEs View on cve.org ↗