CVE-2024-34011

MediumCVSS 6.8/10Last modified Jun 17, 2026

Description

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Cloud Agent (Windows) before build 37758.

Metrics

CVSS 3.0 6.8/10CVSS:3.0/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L

Weakness enumeration

CWE-276

Affected software

No affected versions have been published.

Timeline

Published
Apr 29, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-340124.4Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before bCVE-2024-340137.8Local privilege escalation due to OS command injection vulnerability. The following products are affected: Acronis True Image (macOS) beforeCVE-2024-340145.5Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin CVE-2024-340153.3Sensitive information disclosure during file browsing due to improper symbolic link handling. The following products are affected: Acronis BCVE-2024-340166.5Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Cyber Protect Cloud Agent (WindoCVE-2024-340177.3Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before buiCVE-2024-340185.5Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) befoCVE-2024-340197.3Local privilege escalation due to DLL hijacking vulnerability. The following products are affected: Acronis Snap Deploy (Windows) before buiCVE-2024-34025.4A stored Cross-Site Scripting (XSS) vulnerability existed in version (20240121) of gaizhenbiao/chuanhuchatgpt due to inadequate sanitizationCVE-2024-340206.5A stack-based buffer overflow was found in the putSDN() function of mail.c in hcode through 2.1.CVE-2024-340216.8Unrestricted upload of file with dangerous type vulnerability exists in ELECOM wireless LAN routers. A specially crafted file may be uploadeCVE-2024-340226.7Improper Access Control in some Thunderbolt(TM) Share software before version 1.0.49.9 may allow an authenticated user to potentially enable
CVE-2024-34011: Medium severity, CVSS 6.8 | Vulnix