CVE-2023-6154CWE-15

Local privilege escalation in Bitdefender Total Security (VA-11168)

High · published April 1, 2024

CVSS v3.1
7.8
EPSS
0%
Percentile
9.3
In the wild
Unconfirmed
What it is

A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114.

The record
Technical detail
CVSS v3.1
7.8 · HIGH
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00200 · 9.3th percentile
Weakness
CWE-15 · External Control of System or Configuration Setting
Published
2024-04-01T10:06Z
EPSS history
Timeline
  • 01 APR 10:06Z
    Local privilege escalation in Bitdefender Total Security (VA-11168)
    cvelistv5