CVE-2017-3219
High
Description
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash.
SeverityHigh
CVSS8.8
Exploit probability—
ProductAcronis True Image
PublishedJun 21, 2017
First seenJun 21, 2017
Weakness typeCWE-311CWE-311
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| acronis true_image | v ≤ 2017 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.