CVE-2020-9451
The logs are generated in a predictable pattern, allowing an unprivileged user to create a hardlink from a (not yet created) log file to anti_ransomware_service.exe.
Does this matter?
Lower severity and a low EPSS score (0.38%). Track it; it rarely justifies an emergency change on its own.
Description
An issue was discovered in Acronis True Image 2020 24.5.22510. anti_ransomware_service.exe keeps a log in a folder where unprivileged users have write permissions. The logs are generated in a predictable pattern, allowing an unprivileged user to create a hardlink from a (not yet created) log file to anti_ransomware_service.exe. On reboot, this forces the anti_ransomware_service to try to write its log into its own process, crashing in a SHARING VIOLATION. This crash occurs on every reboot.
- CVSS 3.1
- 5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
- EPSS
- 0.38% probability · 32th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-276
- Affected
- acronis/true image 2020
- Source
- cve@mitre.org
References
- https://danishcyberdefence.dk/blogThird Party Advisory
- https://madsjoensen.dk/cve-2020-9451/Exploit, Third Party Advisory
- https://www.acronis.comVendor Advisory
- https://danishcyberdefence.dk/blogThird Party Advisory
- https://madsjoensen.dk/cve-2020-9451/Exploit, Third Party Advisory
- https://www.acronis.comVendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.