ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 3
ΠΠΎΠ»ΠΈΡΠ΅ΡΡΠ²ΠΎ 3
CVE-2024-13871
A command injection vulnerability exists in the /check_image_and_trigger_recoveryΒ API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490). This flaw allows an unauthenticated, network-adjacent attacker to execute arbitrary commands on the device, potentially leading to full remote code execution (RCE).
GHSA-wcgf-jq4h-mg8f
A command injection vulnerability exists in the /check_image_and_trigger_recoveryΒ API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490). This flaw allows an unauthenticated, network-adjacent attacker to execute arbitrary commands on the device, potentially leading to full remote code execution (RCE).
BDU:2025-03183
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΡΡΡΡΠΎΠΉΡΡΠ²Π° Π΄Π»Ρ Π·Π°ΡΠΈΡΡ ΠΏΡΠΈΠ±ΠΎΡΠΎΠ² ΠΈ Π³Π°Π΄ΠΆΠ΅ΡΠΎΠ² Bitdefender BOX 1, ΡΠ²ΡΠ·Π°Π½Π½Π°Ρ Ρ Π½Π΅ΠΏΡΠΈΠ½ΡΡΠΈΠ΅ΠΌ ΠΌΠ΅Ρ ΠΏΠΎ ΠΎΡΠΈΡΡΠΊΠ΅ Π΄Π°Π½Π½ΡΡ Π½Π° ΡΠΏΡΠ°Π²Π»ΡΡΡΠ΅ΠΌ ΡΡΠΎΠ²Π½Π΅, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π²ΡΠΏΠΎΠ»Π½ΠΈΡΡ ΠΏΡΠΎΠΈΠ·Π²ΠΎΠ»ΡΠ½ΡΠ΅ ΠΊΠΎΠΌΠ°Π½Π΄Ρ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ | CVSS | EPSS | ΠΠΏΡΠ±Π»ΠΈΠΊΠΎΠ²Π°Π½ΠΎ | |
|---|---|---|---|---|
 | CVE-2024-13871 A command injection vulnerability exists in the /check_image_and_trigger_recoveryΒ API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490). This flaw allows an unauthenticated, network-adjacent attacker to execute arbitrary commands on the device, potentially leading to full remote code execution (RCE). | CVSS3: 8.8 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 1 Π³ΠΎΠ΄Π° Π½Π°Π·Π°Π΄ |
| GHSA-wcgf-jq4h-mg8f A command injection vulnerability exists in the /check_image_and_trigger_recoveryΒ API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490). This flaw allows an unauthenticated, network-adjacent attacker to execute arbitrary commands on the device, potentially leading to full remote code execution (RCE). | CVSS3: 8.8 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 1 Π³ΠΎΠ΄Π° Π½Π°Π·Π°Π΄ |
 | BDU:2025-03183 Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΡ ΡΡΡΡΠΎΠΉΡΡΠ²Π° Π΄Π»Ρ Π·Π°ΡΠΈΡΡ ΠΏΡΠΈΠ±ΠΎΡΠΎΠ² ΠΈ Π³Π°Π΄ΠΆΠ΅ΡΠΎΠ² Bitdefender BOX 1, ΡΠ²ΡΠ·Π°Π½Π½Π°Ρ Ρ Π½Π΅ΠΏΡΠΈΠ½ΡΡΠΈΠ΅ΠΌ ΠΌΠ΅Ρ ΠΏΠΎ ΠΎΡΠΈΡΡΠΊΠ΅ Π΄Π°Π½Π½ΡΡ Π½Π° ΡΠΏΡΠ°Π²Π»ΡΡΡΠ΅ΠΌ ΡΡΠΎΠ²Π½Π΅, ΠΏΠΎΠ·Π²ΠΎΠ»ΡΡΡΠ°Ρ Π½Π°ΡΡΡΠΈΡΠ΅Π»Ρ Π²ΡΠΏΠΎΠ»Π½ΠΈΡΡ ΠΏΡΠΎΠΈΠ·Π²ΠΎΠ»ΡΠ½ΡΠ΅ ΠΊΠΎΠΌΠ°Π½Π΄Ρ | CVSS3: 9.6 | 1% ΠΠΈΠ·ΠΊΠΈΠΉ | Π±ΠΎΠ»ΡΡΠ΅ 1 Π³ΠΎΠ΄Π° Π½Π°Π·Π°Π΄ |
Π£ΡΠ·Π²ΠΈΠΌΠΎΡΡΠ΅ΠΉ Π½Π° ΡΡΡΠ°Π½ΠΈΡΡ