Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Bitdefender BOX v1 1.3.11.505 Clear all filters
TI-2024-12892 CVE-2024-13871 · GHSA-wcgf-jq4h-mg8f

Unauthenticated Command Injection in Bitdefender BOX v1

Priority MEDIUM 44

A command injection vulnerability exists in the /check_image_and_trigger_recovery API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490).

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.00766 Published 2025-03-12 Fixed in 1.3.11.505 CWE-77
TI-2024-12893 CVE-2024-13872 · GHSA-g45m-r7f4-g5c2

Bitdefender Box Insecure Update Mechanism Vulnerability in libboxhermes.so

Priority MEDIUM 42

Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to download assets over the Internet to update and restart daemons and detection rules on the devices.

CVSS 4.0CRITICAL 9.4 Adjacent network No auth No interaction EPSS 0.00232 Published 2025-03-12 Fixed in 1.3.11.505 CWE-319