PT-2023-12628 · Bitdefender · Bitdefender Antivirus Plus+2

Published 2023-05-24 · Updated 2023-05-31 · CVE-2022-0357

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bitdefender Total Security versions prior to 26.0.10.45 Bitdefender Internet Security versions prior to 26.0.10.45 Bitdefender Antivirus Plus versions prior to 26.0.10.45

Description The issue is related to an Unquoted Search Path or Element vulnerability in the Vulnerability Scan component, allowing an attacker to elevate privileges to SYSTEM.

Recommendations For Bitdefender Total Security versions prior to 26.0.10.45, update to version 26.0.10.45 or later. For Bitdefender Internet Security versions prior to 26.0.10.45, update to version 26.0.10.45 or later. For Bitdefender Antivirus Plus versions prior to 26.0.10.45, update to version 26.0.10.45 or later.

Fix

Weakness Enumeration

CWE-428

Related Identifiers

CVE-2022-0357

Affected Products

Bitdefender Antivirus Plus

Bitdefender Internet Security

Bitdefender Total Security

References · 5

• https://osv.dev/vulnerability/CVE-2022-0357 · Vendor Advisory
• https://bitdefender.com/support/security-advisories/improper-quoting-path-issue-in-bitdefender-total-security · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-0357 · Security Note
• https://t.me/cibsecurity/64673 · Telegram Post
• https://t.me/cvenotify/51030 · Telegram Post