CVE-2020-25736

EPSS 2.2%

Vexday Risk Score

18Low

SSVC decision (CISA)

Attend

PoC available → attend closely

Exploit maturity

Functional exploit

Automatable exploit available (Nuclei/Metasploit).

CVSS —EPSS 2.2%KEV nãoPoC —Nuclei —Metasploit simPatch —

Lifecycle

11 Nov 2020Metasploit module available

15 Jul 2021Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration.

Affected products

References