Vendor/product archive

bitdefender / box_2_firmware CVEs

Beta · best-effort

3 CVEs tagged to bitdefender / box_2_firmware — 1 Critical, 2 High, 0 Medium, 0 Low, 0 Unrated.

See this archive with more filters Back to bitdefender vendor archive

CVE-2019-17095

Published Jan 27, 2020

A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method `/api/download_image` unsafely…

CVSS 8.1 · High

Vendor/product tagsBeta · best-effort

CVE-2019-17096

Published Jan 27, 2020

A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumstances to inject a sys…

CVSS 9.0 · Critical

Vendor/product tagsBeta · best-effort

CVE-2019-17102

Published Jan 27, 2020

An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method `/api/update_setup` does not perform firmwar…

CVSS 8.3 · High

Vendor/product tagsBeta · best-effort

Showing 1-3 of 3 CVEsPage 1 of 1