critical9.0
CVE-2019-17096
A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumsta…
Impact
A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function in special circumstances to inject a system command.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Bitdefender | Box 2 Firmware | All versions |
| Bitdefender | Central | before 2.0.66 before 2.0.66.88 |