Vulnerability Description
Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vulnerable instances. This issue affects the following products that include the vulnerable component: Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Bitdefender | Endpoint Security | 7.0.5.200089 |
| Bitdefender | Gravityzone Control Center | 6.36.1 |
Related Weaknesses (CWE)
References
- https://www.bitdefender.com/support/security-advisories/privilege-escalation-viaVendor Advisory
- https://www.bitdefender.com/support/security-advisories/privilege-escalation-viaVendor Advisory
FAQ
What is CVE-2024-2224?
CVE-2024-2224 is a vulnerability with a CVSS score of 8.1 (HIGH). Improper Limitation of a Pathname to a Restricted Directory (‘Path Traversal’) vulnerability in the UpdateServer component of Bitdefender GravityZone allows an attacker to execute arbitrary code on vu...
How severe is CVE-2024-2224?
CVE-2024-2224 has been rated HIGH with a CVSS base score of 8.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-2224?
Check the references section above for vendor advisories and patch information. Affected products include: Bitdefender Endpoint Security, Bitdefender Gravityzone Control Center.