Description
An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows an unauthenticated attacker to downgrade the device's firmware to an older, potentially vulnerable version of a Bitdefender-signed firmware. The attack requires Bitdefender BOX to be booted in Recovery Mode and that the attacker be present within the WiFi range of the BOX unit.
INFO
Published Date :
2025-03-12T11:48:35.528Z
Last Modified :
2025-03-12T14:01:55.166Z
Source :
Bitdefender
AFFECTED PRODUCTS
The following products are affected by CVE-2024-13870 vulnerability.
| Vendors | Products |
|---|---|
| Bitdefender |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2024-13870.
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Attack Requirements
Privileges Required
User Interaction
VS Confidentiality
VS Integrity
VS Availability
SS Confidentiality
SS Integrity
SS Availability
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact