CVE-2024-13872
Bitdefender Box Insecure Update Mechanism Vulnerability in libboxhermes.so
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Bitdefender Box Insecure Update Mechanism Vulnerability in libboxhermes.so
Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to download assets over the Internet to update and restart daemons and detection rules on the devices. Updates can be remotely triggered through the /set_temp_token API method. Then, an unauthenticated and network-adjacent attacker can use man-in-the-middle (MITM) techniques to return malicious responses. Restarted daemons that use malicious assets can then be exploited for remote code execution on the device.
Reserved 2025-02-13 | Published 2025-03-12 | Updated 2025-03-12 | Assigner BitdefenderCWE-319: Cleartext Transmission of Sensitive Information
Alan Cao
bitdefender.com/...-in-libboxhermes-so-in-bitdefender-box-v1
Support options
