CVE-2024-34010highCWE-428

CVE-2024-34010: high-severity vulnerability in Acronis Cyber Protect Cloud Agent

Published · Updated

Follow this CVE+ Monitor Acronis Cyber Protect+ Monitor Acronis Cyber Protect Cloud Agent

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.2epss 0.2%
Local privilege escalation due to unquoted search path vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758, Acronis Cyber Protect 16 (Windows) before build 38690, Acronis True Image (Windows) before build 42386, Acronis True Image OEM (Windows) before build 42575.
CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
Affected products
Acronis · Acronis Cyber Protect 16Acronis · Acronis Cyber Protect Cloud AgentAcronis · Acronis True ImageAcronis · Acronis True Image OEM
Related CVEs — Acronis Cyber Protect Cloud Agent

In the same product, most dangerous first.

CVE-2025-30411CRITICALCVE-2025-30411EPSS 0.8%CVE-2025-30410CRITICALCVE-2025-30410EPSS 0.7%CVE-2025-30412CRITICALCVE-2025-30412EPSS 0.7%CVE-2024-34013HIGHCVE-2024-34013EPSS 0.6%CVE-2025-30416CRITICALCVE-2025-30416EPSS 0.5%CVE-2025-30415HIGHCVE-2025-30415EPSS 0.4%