CVE-2020-9450: High severity acronis true image vulnerability
An issue was discovered in Acronis True Image 2020 24.5.22510. antiransomwareservice.exe exposes a REST API that can be used by everyone, even unprivileged users. This API is used to communicate from the GUI to antiransomwareservice.exe. This can be exploited to add an arbitrary malicious executable to the whitelist, or even exclude an entire drive from being monitored by antiransomwareservice.exe.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-9450?
CVE-2020-9450 has a high severity rating due to its potential to allow unauthorized access to the REST API.
How do I fix CVE-2020-9450?
To fix CVE-2020-9450, users should update to the latest version of Acronis True Image that addresses this vulnerability.
What are the potential impacts of exploiting CVE-2020-9450?
Exploiting CVE-2020-9450 can allow an attacker to execute arbitrary commands and potentially install malicious software.
Who is affected by CVE-2020-9450?
CVE-2020-9450 affects all users of Acronis True Image version 24.5.22510.
What component of Acronis True Image is vulnerable in CVE-2020-9450?
The vulnerable component in CVE-2020-9450 is the anti_ransomware_service.exe which exposes an unsecured REST API.