What is CVE-2019-17099?

CVE-2019-17099 is a medium-severity vulnerability in Bitdefender Endpoint_security_tools, classified under Untrusted Search Path. CVSS score: 5.3/10. Published 2020-01-27.

How severe is CVE-2019-17099?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Vulnerability in Bitdefender Endpoint_security_tools

CVE-2019-17099

An Untrusted Search Path vulnerability in EPSecurityService.exe as used in Bitdefender Endpoint Security Tools versions prior to 6.6.11.163 allows an attacker to load an arbitrary DLL file from the search path. This issue affects: Bitdefen…

EPSS: 0.007 (47.2th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:L/A:L.

Affected products

Bitdefender Endpoint_security_tools
Bitdefender Epsecurityservice.exe — versions 6.6.11.162 and prior

Weakness classification (CWE)

CWE-426 — Untrusted Search Path

References

cve-requests@bitdefender.com (x_refsource_CONFIRM, Vendor Advisory)

Frequently asked questions

What is CVE-2019-17099?: CVE-2019-17099 is a medium-severity vulnerability in Bitdefender Endpoint_security_tools, classified under Untrusted Search Path. CVSS score: 5.3/10. Published 2020-01-27.
How severe is CVE-2019-17099?: Medium severity. CVSS v3 base score is 5.3 out of 10.