What is CVE-2024-34010?

CVE-2024-34010 is a high-severity vulnerability in Acronis Cyber Protect 16, classified under Unquoted Search Path or Element. CVSS score: 8.2/10. Published 2024-04-29.

How severe is CVE-2024-34010?

High severity. CVSS v3 base score is 8.2 out of 10.

Vulnerability in Acronis Cyber Protect 16

CVE-2024-34010

Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386, Acronis True Image OEM (Windows) before build 42575.

EPSS: 0.002 (10.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H.

Affected products

Acronis Cyber Protect 16 — versions unspecified
Acronis Cyber Protect Cloud Agent — versions unspecified
Acronis True Image — versions unspecified
Acronis True Image Oem — versions unspecified

Weakness classification (CWE)

CWE-428 — Unquoted Search Path or Element

References

security@acronis.com (vendor-advisory)

Frequently asked questions

What is CVE-2024-34010?: CVE-2024-34010 is a high-severity vulnerability in Acronis Cyber Protect 16, classified under Unquoted Search Path or Element. CVSS score: 8.2/10. Published 2024-04-29.
How severe is CVE-2024-34010?: High severity. CVSS v3 base score is 8.2 out of 10.