CVE-2024-34013

High

Description

Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) before build 41396, Acronis True Image OEM (macOS) before build 42571.

SeverityHigh

CVSS7.8

Exploit probability—

ProductAcronis True Image

PublishedJul 18, 2024

First seenJul 18, 2024

Weakness typeCWE-78OS command injection

How to fix

Update

Acronis Acronis True Image41396 or later
Acronis Acronis True Image OEM42571 or later

Vendor advisories

security-advisory.acronis.com/advisories/SEC-7035

Affected products

Product	Affected versions	Fixed in
Acronis Acronis True Image	v < 41396	41396
Acronis Acronis True Image OEM	v < 42571	42571

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.