{"id":"CVE-2023-6154","state":"PUBLISHED","title":"Local privilege escalation in Bitdefender Total Security (VA-11168)","description":"A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114.","publishedAt":"2024-04-01T10:06:57.864Z","updatedAt":"2024-08-12T18:40:14.131Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"Bitdefender"},"assigner":"Bitdefender","products":["Bitdefender Total Security","Bitdefender Internet Security","Bitdefender Antivirus Plus","Bitdefender Antivirus Free"],"affected":[{"vendor":"Bitdefender","product":"Total Security","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}]},{"vendor":"Bitdefender","product":"Internet Security","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}]},{"vendor":"Bitdefender","product":"Antivirus Plus","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}]},{"vendor":"Bitdefender","product":"Antivirus Free","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}]}],"references":["https://bitdefender.com/support/security-advisories/local-privilege-escalation-in-bitdefender-total-security-va-11168/"],"weaknesses":["CWE-15"],"ingestedAt":"2026-10-29T20:06:42.242Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2023/6xxx/CVE-2023-6154.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2023-6154","state":"PUBLISHED","datePublished":"2024-04-01T10:06:57.864Z","dateUpdated":"2024-08-12T18:40:14.131Z","assignerShortName":"Bitdefender","assignerOrgId":"b3d5ebe7-963e-41fb-98e1-2edaeabb8f82","dateReserved":"2023-11-15T13:17:52.814Z"},"containers":{"cna":{"title":"Local privilege escalation in Bitdefender Total Security (VA-11168)","descriptions":[{"lang":"en","value":"A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114."}],"affected":[{"vendor":"Bitdefender","product":"Total Security","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}]},{"vendor":"Bitdefender","product":"Internet Security","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}]},{"vendor":"Bitdefender","product":"Antivirus Plus","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}]},{"vendor":"Bitdefender","product":"Antivirus Free","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}]}],"references":[{"url":"https://bitdefender.com/support/security-advisories/local-privilege-escalation-in-bitdefender-total-security-va-11168/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-15","description":"CWE-15: External Control of System or Configuration Setting","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"Bitdefender","orgId":"b3d5ebe7-963e-41fb-98e1-2edaeabb8f82","dateUpdated":"2024-04-01T10:06:57.864Z"},"datePublic":"2024-04-01T09:00:00.000Z","impacts":[{"capecId":"CAPEC-203","descriptions":[{"lang":"en","value":"CAPEC-203 Manipulate Registry Information"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"An automatic update to version 27.0.25.115 fixes the issue."}],"value":"An automatic update to version 27.0.25.115 fixes the issue."}],"source":{"discovery":"UNKNOWN"},"x_generator":{"engine":"Vulnogram 0.1.0-dev"}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://bitdefender.com/support/security-advisories/local-privilege-escalation-in-bitdefender-total-security-va-11168/","tags":["x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-02T08:21:17.586Z"}},{"title":"CISA ADP Vulnrichment","affected":[{"vendor":"bitdefender","product":"total_security","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}],"cpes":["cpe:2.3:a:bitdefender:total_security:27.0.25.114:*:*:*:*:*:*:*"]},{"vendor":"bitdefender","product":"internet_security","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}],"cpes":["cpe:2.3:a:bitdefender:internet_security:27.0.25.114:*:*:*:*:*:*:*"]},{"vendor":"bitdefender","product":"antivirus_plus","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}],"cpes":["cpe:2.3:a:bitdefender:antivirus_plus:27.0.25.114:*:*:*:*:*:*:*"]},{"vendor":"bitdefender","product":"antivirus","defaultStatus":"unaffected","versions":[{"version":"27.0.25.114","status":"affected"}],"cpes":["cpe:2.3:a:bitdefender:antivirus:27.0.25.114:*:*:*:*:*:*:*"]}],"metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2024-04-02T15:38:45.661553Z","id":"CVE-2023-6154","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2024-08-12T18:40:14.131Z"}}]}}}