Login Request a demo
BF
Product
Box Firmware
by Bitdefender · last CVE Mar 12, 2025
5
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 3Medium 2Low 0
Severity
All severities5Critical0High3Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Box Firmware to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-13871
8.8
1%
Mar 12
A command injection vulnerability exists in the /check_image_and_trigger_recovery API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490)
Affected: 1.3.11.490
CVE-2019-12612
7.8
0%
Oct 31
An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass arbitrary code to the BOX appliance via the web API
Affected: before 2.1.37.37-34
CVE-2024-13872
7.5
0%
Mar 12
Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to download assets over the Internet to update and restart daemons and detection rules on…
Affected: 1.3.11.490 through 1.3.11.505
Showing 3