← CVE Intelligence

CVE-2020-10140

Acronis / True Image PUBLISHED

Description (CNA)

Acronis True Image 2021 fails to properly set ACLs of the C:\ProgramData\Acronis directory. Because some privileged processes are executed from the C:\ProgramData\Acronis, an unprivileged user can achieve arbitrary code execution with SYSTEM privileges by placing a DLL in one of several paths within C:\ProgramData\Acronis.

Affected (CNA)

Vendor / productVersions
Acronis / True Imageaffected 2021 before 32010

CWE

CWE-732

References

ADP enrichment

CVE

No English description supplied.