CVSS: 9.8EPSS: 1%CPEs: 4EXPL: 0CVE-2019-17096 – Bitdefender BOX 2 bootstrap get_image_size command injection vulnerability
https://notcve.org/view.php?id=CVE-2019-17096
27 Jan 2020 — A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumstances to inject a system command. Una vulnerabilidad de Inyección de Comandos de Sistema Operativo en la etapa de arranque de Bitdefender BOX 2, permite la manipulación de la función "get_image_url()" en circunstancias especiales para inyectar un comando de sistema. • https://www.bitdefender.com/support/security-advisories/bitdefender-box-2-bootstrap-get_image_size-command-injection-vulnerability • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •
CVSS: 9.3EPSS: 0%CPEs: 2EXPL: 0CVE-2019-17102 – Bitdefender BOX v2 bootstrap update_setup command execution vulnerability (VA-2226)
https://notcve.org/view.php?id=CVE-2019-17102
27 Jan 2020 — An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method `/api/update_setup` does not perform firmware signature checks atomically, leading to an exploitable race condition (TOCTTOU) that allows arbitrary execution of system commands. This issue affects: Bitdefender Bitdefender BOX 2 versions prior to 2.1.47.36. Se presenta una vulnerabilidad de ejecución de comando explotable en la partición de recuperación de Bitdefender BOX 2, ... • https://www.bitdefender.com/support/security-advisories/bitdefender-box-v2-bootstrap-update_setup-command-execution-vulnerability-va-2226 • CWE-367: Time-of-check Time-of-use (TOCTOU) Race Condition CWE-413: Improper Resource Locking •
CVSS: 10.0EPSS: 8%CPEs: 3EXPL: 1CVE-2019-17095 – Bitdefender BOX 2 bootstrap download_image command injection vulnerability
https://notcve.org/view.php?id=CVE-2019-17095
06 Jan 2020 — A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The API method `/api/download_image` unsafely handles the production firmware URL supplied by remote servers, leading to arbitrary execution of system commands. In order to exploit the condition, an unauthenticated attacker should impersonate a infrastructure server to trigger this vulnerability. Se ha detectado una vulnerabilidad de inyección de comandos en la etapa de arranq... • https://talosintelligence.com/vulnerability_reports/TALOS-2019-0919 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •