Vulnerability Details : CVE-2021-32581
Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653, Acronis Cyber Protect prior to build 27009 did not implement SSL certificate validation.
Products affected by CVE-2021-32581
- cpe:2.3:a:acronis:true_image:2021:-:*:*:*:macos:*:*
- cpe:2.3:a:acronis:true_image:2021:update_1:*:*:*:macos:*:*
- cpe:2.3:a:acronis:true_image:2021:update_2:*:*:*:macos:*:*
- cpe:2.3:a:acronis:true_image:2021:update_3:*:*:*:macos:*:*
- cpe:2.3:a:acronis:true_image:2021:-:*:*:*:windows:*:*
- cpe:2.3:a:acronis:true_image:2021:update_1:*:*:*:windows:*:*
- cpe:2.3:a:acronis:true_image:2021:update_2:*:*:*:windows:*:*
- cpe:2.3:a:acronis:true_image:2021:update_3:*:*:*:windows:*:*
- cpe:2.3:a:acronis:true_image:2021:update_4:*:*:*:macos:*:*
- cpe:2.3:a:acronis:cyber_protect_cloud:*:*:*:*:*:*:*:*
- cpe:2.3:a:acronis:cyber_protection_agent:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2021-32581
0.16%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 33 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2021-32581
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.8
|
MEDIUM | AV:N/AC:M/Au:N/C:P/I:P/A:N |
8.6
|
4.9
|
NIST | |
|
8.1
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N |
2.8
|
5.2
|
NIST |
CWE ids for CVE-2021-32581
-
The product does not validate, or incorrectly validates, a certificate.Assigned by: nvd@nist.gov (Primary)
References for CVE-2021-32581
-
https://kb.acronis.com/content/68413
Acronis True Image 2021 Update 5: Security Content | Knowledge BaseVendor Advisory
-
https://kb.acronis.com/content/68648
Acronis Agent Update C21.03: Security Content | Knowledge BaseVendor Advisory
-
https://kb.acronis.com/content/68419
Acronis True Image 2021 Update 4: Security Content | Knowledge BaseVendor Advisory
Jump to