CVE-2017-3219
HighSummary
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash.
Risk Assessment
The use of HTTP and weak verification of updates can lead to malware or man-in-the-middle attacks, posing a serious security risk to the system.
Recommendation
It is recommended to upgrade to a newer version of Acronis True Image that uses more secure update and verification methods, such as HTTPS and stronger hashing algorithms.
Other vulnerabilities in Acronis True Image
See all- CVE-2026-33271Medium
Acronis True Image for Windows before build 42902 has a local privilege escalation vulnerability due to insecure folder permissions.
- CVE-2026-28728Medium
Local privilege escalation vulnerability due to DLL hijacking in Acronis True Image (Windows) before build 42902.
- CVE-2026-27774Medium
Local privilege escalation vulnerability due to DLL hijacking. Affects Acronis True Image for Windows before build 42902.
Original NVD description (English source)
Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash.