An issue exists in Bitdefender BOX firmware versions prior to 2.1.37.37-34 that allows an malicious user to pass arbitrary code to the BOX appliance via the web API. In order to exploit this vulnerability, an attacker needs presence in Bitdefender BOX setup network and Bitdefender BOX be in setup mode.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
bitdefender box_firmware |
Vulmon