CVE-2017-3219

—

CVSS 3.0

8.8 high

EPSS

<1%p39

Published

Jun 21, 2017 (Jun 21, 2017)

Modified

Jun 17, 2026

Description

Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash.

Vendors: acronis
Products: true image
Weakness: CWE-311, CWE-345
Vector: CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (0.5%)

In the news0 stories

No ingested article mentions this CVE yet.