Read the docs
TI-2024-02064 Aliases CVE-2024-2223GHSA-mvf3-qj92-4c7r

Incorrect Regular Expression in GravityZone Update Server (VA-11465)

Priority MEDIUM 43CWE-185Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA.

Summary

An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component:  Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for  Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00521 44th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
BitdefenderGravityZone Control Center (On Premises)6.36.1 and later—No fix listedCNA
BitdefenderEndpoint Security for Windows7.9.9.380—No fix listedCNA
BitdefenderEndpoint Security for Linux7.0.5.200089—No fix listedCNA
  • GravityZone Control Center (On Premises) VendorBitdefender Affected 6.36.1 and later Fixed in — No fix listed CNA
  • Endpoint Security for Windows VendorBitdefender Affected 7.9.9.380 Fixed in — No fix listed CNA
  • Endpoint Security for Linux VendorBitdefender Affected 7.0.5.200089 Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPEVersionsRoleVendor
cpe:2.3:a:bitdefender:endpoint_security:7.0.5.200089:*:*:*:*:linux:*:*7.0.5.200089VulnerableBitdefender
cpe:2.3:a:bitdefender:endpoint_security:7.9.9.380:*:*:*:*:windows:*:*7.9.9.380VulnerableBitdefender
cpe:2.3:a:bitdefender:gravityzone_control_center:6.36.1:*:*:*:on_premises:*:*:*6.36.1VulnerableBitdefender
  • cpe:2.3:a:bitdefender:endpoint_security:7.0.5.200089:*:*:*:*:linux:*:* Versions 7.0.5.200089 Vulnerable ·Bitdefender
  • cpe:2.3:a:bitdefender:endpoint_security:7.9.9.380:*:*:*:*:windows:*:* Versions 7.9.9.380 Vulnerable ·Bitdefender
  • cpe:2.3:a:bitdefender:gravityzone_control_center:6.36.1:*:*:*:on_premises:*:*:* Versions 6.36.1 Vulnerable ·Bitdefender

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-2223
  2. 2026-10-03 Alias added: GHSA-mvf3-qj92-4c7r

References

Advisory 1

  • TI-2024-02065 Privilege Escalation via the GravityZone productManager UpdateServer.KitsManager API (VA-11466) CVSS 3.1CRITICAL 9.8
  • TI-2020-06527 Insufficient client validation in Bitdefender Endpoint Security for Mac (VA-8759) CVSS 3.1HIGH 8.8
  • TI-2020-06519 Improper authentication vulnerability in Bitdefender Endpoint Security Tools and Endpoint Security SDK (VA-8646) CVSS 3.1HIGH 8.1
  • TI-2025-04772 Improper access restriction to critical folder in Bitdefender Endpoint Security Tools for Mac CVSS 4.0MEDIUM 6.8

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences