Acronis True Image 2020 vulnerabilities

3 CVEs affecting Acronis True Image 2020, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2020-9452, published 2021-05-25.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2020-9452, published 2021-05-25. High severity, CVSS 7.8. EPSS: 0.5% chance of exploitation in the next 30 days. An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe includes functionality to quarantine files by copying a suspected ransomware file from one directory to…
CVE-2020-9450, published 2021-05-25. High severity, CVSS 7.8. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe exposes a REST API that can be used by everyone, even unprivileged users. This API is used to communicate…
CVE-2020-9451, published 2021-05-25. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe keeps a log in a folder where unprivileged users have write permissions. The logs are generated in a…