CVE-2020-8107

· HIGHModified

← All CVEs

CVSS v3.1

8.2

EPSS

0.32%

Published

Feb 18, 2022

Modified

Nov 21, 2024

Public PoC / Exploit

All weaponized →

No public PoC or exploit code indexed for this CVE.

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Weaknesses (CWE)

CWE-114

Affected Products (3)

bitdefender · antivirus_plus (up to 24.0.26.136)vulnerable

bitdefender · internet_security (up to 24.0.26.136)vulnerable

bitdefender · total_security (up to 24.0.26.136)vulnerable

References (2)

https://www.bitdefender.com/support/security-advisories/process-control-vulnerability-bitdefender-antivirus-plus-va-8709/

Vendor Advisory

https://www.bitdefender.com/support/security-advisories/process-control-vulnerability-bitdefender-antivirus-plus-va-8709/

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs