CVE-2021-3485CWE-494

Improper Input Validation in Bitdefender Endpoint Security Tools for Linux

Medium · published May 24, 2021

CVSS v3.1
6.4
EPSS
1%
Percentile
58.7
In the wild
Unconfirmed
What it is

An Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux allows a man-in-the-middle attacker to abuse the DownloadFile function of the Product Update to achieve remote code execution. This issue affects: Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.155.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00880 · 58.7th percentile
Weakness
CWE-494 · Download of Code Without Integrity Check
Published
2021-05-24T13:30Z
EPSS history
Timeline
  • 24 MAY 13:30Z
    Improper Input Validation in Bitdefender Endpoint Security Tools for Linux
    cvelistv5