CVE-2017-3219

CVE-2017-3219 affects Acronis True Image up to and including version 2017 Build 8053, stemming from its insecure software update mechanism. The vulnerability, rated 8.8 HIGH, allows an attacker on the same network to intercept and tamper with updates due to the use of HTTP and reliance solely on a server-provided MD5 hash for verification. This could lead to high impact on confidentiality, integrity, and availability. While no public exploits or active exploitation have been observed, and community discussion is minimal, the potential for a network-based attack to deliver malicious updates remains.