Bitdefender Box V1
3 CVEs affecting Bitdefender Box V1. Latest disclosed: 2025-03-12. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-13871 | High | 8.8 | 2025-03-12 | A command injection vulnerability exists in the /check_image_and_trigger_recovery API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490). This flaw al… |
CVE-2024-13872 | High | 7.5 | 2025-03-12 | Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to download assets over the Internet to update and restart daemons and… |
CVE-2024-13870 | Medium | 5.7 | 2025-03-12 | An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows an unauthenticated attacker to downgra… |