Acronis

Records232All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical14CVSS 9.0–10.0

CVSS high113CVSS 7.0–8.9

Exploited now

Acronis records in CISA KEV

TI-2026-59964 Acronis Backup Incorrect Default Permissions Vulnerability CRITICAL 93KEV 2026-09-16 TI-2023-24253 Acronis Cyber Infrastructure (ACI) Insecure Default Password Vulnerability CRITICAL 100KEV 2024-07-29

Components

Products in the NVD configurations · select one to filter the records

Cyber Protect 86 records HIGH Agent 45 records LOW True Image 25 records LOW Cyber Protect Home Office 22 records MEDIUM Snap Deploy 9 records LOW Cyber Files 5 records LOW Cloud Manager 4 records MEDIUM Cyber Backup 4 records HIGH

Records

9 records in Snap Deploy · all components

TI-2023-02211 CVE-2023-2355 · GHSA-gpmp-xp4x-88w7

Uncontrolled search path in Acronis Snap Deploy

LOW 35

Local privilege escalation due to a DLL hijacking vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00152 Published 2023-04-27 Fixed in 3900 CWE-427

TI-2022-12832 CVE-2022-30696 · GHSA-8fjh-j2gv-59p9

Uncontrolled search path in Acronis Snap Deploy

LOW 34

Local privilege escalation due to a DLL hijacking vulnerability.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00246 Published 2022-05-16 Fixed in 3640 CWE-427

TI-2024-22488 CVE-2024-34019 · GHSA-cpmm-pqjj-wh64

Uncontrolled search path in Acronis Snap Deploy

LOW 33

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00139 Published 2024-08-29 Fixed in 4569 CWE-427

TI-2024-22486 CVE-2024-34017 · GHSA-c8gg-mcpj-h38f

Uncontrolled search path in Acronis Snap Deploy

LOW 33

Local privilege escalation due to DLL hijacking vulnerability.

CVSS 3.1HIGH 7.3 Local Low privileges User interaction EPSS 0.00139 Published 2024-08-29 Fixed in 4569 CWE-427

TI-2022-12833 CVE-2022-30697 · GHSA-424f-2594-fw2c

Uncontrolled search path in Acronis Snap Deploy

LOW 33

Local privilege escalation due to insecure folder permissions.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00226 Published 2022-05-16 Fixed in 3640 CWE-427

TI-2022-12831 CVE-2022-30695 · GHSA-5xj3-jv6p-3cmp

Improper privilege management in Acronis Snap Deploy

LOW 33

Local privilege escalation due to excessive permissions assigned to child processes.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00197 Published 2022-05-16 Fixed in 3640 CWE-250

TI-2008-01358 CVE-2008-1411 · GHSA-jcxc-fp4m-25j7

The PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote…

LOW 33

The PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to cause a denial of service (crash) via an incomplete TFTP request, which triggers a NULL pointer dereference.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07575 Published 2008-03-20 No fix listed CWE-20

TI-2008-01357 CVE-2008-1410 · GHSA-gc66-4pjr-f4hh

Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy…

LOW 29

Directory traversal vulnerability in the PXE Server (pxesrv.exe) in Acronis Snap Deploy 2.0.0.1076 and earlier allows remote attackers to read arbitrary files via directory traversal sequences to the TFTP service.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.05568 Published 2008-03-20 No fix listed CWE-22

TI-2024-22487 CVE-2024-34018 · GHSA-gx69-x2qq-q7rm

Incorrect default permissions in Acronis Snap Deploy

LOW 24

Sensitive information disclosure due to insecure folder permissions.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00146 Published 2024-08-29 Fixed in 4569 CWE-276

Open these records in search →