CVE-2023-6154
01.04.2024, 11:15
A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114.Enginsight
| Vendor | Product | Version |
|---|---|---|
| bitdefender | antivirus | 27.0.25.114 |
| bitdefender | antivirus_plus | 27.0.25.114 |
| bitdefender | internet_security | 27.0.25.114 |
| bitdefender | total_security | 27.0.25.114 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration
- CWE-15 - External Control of System or Configuration SettingOne or more system settings or configuration elements can be externally controlled by a user.
- CWE-610 - Externally Controlled Reference to a Resource in Another SphereThe product uses an externally controlled name or reference that resolves to a resource that is outside of the intended control sphere.