Acronis Snap Deploy Vulnerability: DLL Hijacking Threat
CVE-2024-34017

7.3HIGH

Key Information:

Vendor

Acronis
Status
Acronis Snap Deploy
Vendor
CVE Published:
29 August 2024

What is CVE-2024-34017?

A vulnerability exists in Acronis Snap Deploy for Windows, which allows local privilege escalation through DLL hijacking. This vulnerability can be exploited by an attacker who has local access to the system, enabling the execution of unauthorized code with elevated privileges. Affected users should upgrade to build 4569 or later to mitigate potential security risks. Continuous monitoring and adherence to security best practices are recommended to protect sensitive systems.

Affected Version(s)

Acronis Snap Deploy Windows < 4569

References

https://security-advisory.acronis.com/advisories/SEC-4505
vendor-advisory

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.