Skip to content
OpenAdvisories

Product · Bitdefender

Bitdefender BOX 2

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.1
    CVE-2019-17095

    Bitdefender BOX 2 bootstrap download_image command injection vulnerability

    A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method `/api/download_image` unsafely handles the production firmware URL supplied by remote servers, leading to arbit…

    Bitdefender Bitdefender BOX 2
  • High 8.3
    CVE-2019-17102

    Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)

    An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method `/api/update_setup` does not perform firmware signature checks atomically, leading to an exploitable race condition (TOCTTOU…

    Bitdefender Bitdefender BOX 2