Skip to content
CVE PROGRAM SOURCE RECORD9.0 Critical

CVE-2019-17096

Bitdefender BOX 2 bootstrap get_image_size command injection vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Bitdefender

Description

A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumstances to inject a system command.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bitdefender Bitdefender BOX 2

  • 2.1.47.42 to < 2.1.59-12affected
  • 2.1.53.45 to < 2.1.59-12affected

References