« Volver al listado

CVE-2021-32581

Estado: ModificadaAlta (8.1)—

Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653, Acronis Cyber Protect prior to build 27009 did not implement SSL certificate validation.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (3)

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2021-32581",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 5.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:N",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8.6,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ],
    "cvssMetricV31": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "scope": "UNCHANGED",
          "version": "3.1",
          "baseScore": 8.1,
          "attackVector": "NETWORK",
          "baseSeverity": "HIGH",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
          "integrityImpact": "HIGH",
          "userInteraction": "REQUIRED",
          "attackComplexity": "LOW",
          "availabilityImpact": "NONE",
          "privilegesRequired": "NONE",
          "confidentialityImpact": "HIGH"
        },
        "impactScore": 5.2,
        "exploitabilityScore": 2.8
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2021-08-05T20:15:09.100",
  "references": [
    {
      "url": "https://kb.acronis.com/content/68413",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://kb.acronis.com/content/68419",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://kb.acronis.com/content/68648",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "https://kb.acronis.com/content/68413",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.acronis.com/content/68419",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://kb.acronis.com/content/68648",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-295"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Acronis True Image prior to 2021 Update 4 for Windows, Acronis True Image prior to 2021 Update 5 for Mac, Acronis Agent prior to build 26653, Acronis Cyber Protect prior to build 27009 did not implement SSL certificate validation."
    },
    {
      "lang": "es",
      "value": "Acronis True Image anterior a versión 2021 Update 4 para Windows, Acronis True Image anterior a versión 2021 Update 5 para Mac, Acronis Agent anterior a la compilación 26653, Acronis Cyber Protect anterior a la compilación 27009, no implementaban la comprobación de certificados SSL"
    }
  ],
  "lastModified": "2026-06-17T03:53:12.807",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:acronis:cyber_protect_cloud:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DA5ECF46-3C9C-42D1-9792-3B8A24C0EFF4",
              "versionEndExcluding": "15.0.27009"
            },
            {
              "criteria": "cpe:2.3:a:acronis:cyber_protection_agent:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "E4B327A6-59A3-4E8D-867B-BCD4482AC1D6",
              "versionEndExcluding": "15.0.26653"
            },
            {
              "criteria": "cpe:2.3:a:acronis:true_image:2021:-:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F68614CB-28F2-4BDB-AED4-109F78838AF8"
            },
            {
              "criteria": "cpe:2.3:a:acronis:true_image:2021:-:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F7B99318-3AA5-428D-B0D7-106128BDCE78"
            },
            {
              "criteria": "cpe:2.3:a:acronis:true_image:2021:update_1:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54625222-9064-4111-AE35-A1691580DE55"
            },
            {
              "criteria": "cpe:2.3:a:acronis:true_image:2021:update_1:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1CFEB0F-588B-4B88-9169-4ADB6396C1C5"
            },
            {
              "criteria": "cpe:2.3:a:acronis:true_image:2021:update_2:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4BF0A2D9-7DE2-4401-B501-78130DE6B458"
            },
            {
              "criteria": "cpe:2.3:a:acronis:true_image:2021:update_2:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "54BE6067-0357-4C68-AA06-CB5EEA3DD86F"
            },
            {
              "criteria": "cpe:2.3:a:acronis:true_image:2021:update_3:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "DB19EFC5-2997-4D52-BB5A-2D42B880C621"
            },
            {
              "criteria": "cpe:2.3:a:acronis:true_image:2021:update_3:*:*:*:windows:*:*",
              "vulnerable": true,
              "matchCriteriaId": "02D1EBBC-47EE-4C46-AA69-DD0B7DE1B173"
            },
            {
              "criteria": "cpe:2.3:a:acronis:true_image:2021:update_4:*:*:*:macos:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A9A87BC-5406-4534-9BB0-2FCDA0218FD6"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}