Lucene search
PRIOn knowledge basePRION:CVE-2019-17102HistoryJan 27, 2020 - 2:15 p.m.
Race condition
2020-01-2714:15:00
PRIOn knowledge base
www.prio-n.com
2
An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method /api/update_setup does not perform firmware signature checks atomically, leading to an exploitable race condition (TOCTTOU) that allows arbitrary execution of system commands. This issue affects: Bitdefender Bitdefender BOX 2 versions prior to 2.1.47.36.
| CPE | Name | Operator | Version |
|---|---|---|---|
| box_2_firmware | lt | 2.1.47.36 |
Related
nvd
nvd
CVE-2019-17102
2020-01-27 14:15:10
cve
cve
CVE-2019-17102
2020-01-27 14:15:10
cvelist
cvelist
talos
talos
Bitdefender BOX 2 bootstrap update_setup command execution vulnerability
2019-01-21 00:00:00