CVE-2017-3219 - AskarLabs CVE Database

CVE-2017-3219

Vendor Acronis

Product True Image

Weakness CWE-311 · Missing encryption

Published June 21, 2017

Last update August 5, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Acronis True Image up to and including version 2017 Build 8053 performs software updates using HTTP. Downloaded updates are only verified using a server-provided MD5 hash.

Key dates

02Disclosure timeline

June 21, 2017 CVE published

August 5, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2017-3219 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/311.html

Related vulnerabilities

04Related CVE

CVE-2025-36751 Missing encryption on Local Configuration Interface or Cloud Endpoint Communication - Growatt MIC3300TL-X and ShineLan-X CVE-2016-10639 CVE-2024-38283 Missing Encryption of Sensitive Data in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600) CVE-2016-10584 CVE-2025-40680 Encryption of sensitive data in CapillaryScope missing