CVE-2020-8107CWE-114

Process Control vulnerability in Bitdefender Antivirus Plus

High · published February 18, 2022

CVSS v3.1
8.2
EPSS
0%
Percentile
24.3
In the wild
Unconfirmed
What it is

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.

The record
Technical detail
CVSS v3.1
8.2 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00324 · 24.3th percentile
Weakness
CWE-114 · Process Control
Published
2022-02-18T08:20Z
EPSS history
Timeline
  • 18 FEB 08:20Z
    Process Control vulnerability in Bitdefender Antivirus Plus
    cvelistv5