CVE-2020-8094: Untrusted Search Path Vulnerability in Bitdefender Antivirus Free 2020 (VA-8422)
Published Jan 15, 2025
·Updated
An untrusted search path vulnerability in testinitsigs.exe as used in Bitdefender Antivirus Free 2020 allows a low-privilege attacker to execute code as SYSTEM via a specially crafted DLL file.
Affected Software
2 affected components
Bitdefender Antivirus Free 2020
Bitdefender Antivirus 2020<1.0.16.152
Remediation
Information
The vulnerability was fixed in Bitdefender Antivirus Free version 1.0.16.152. The fix has been automatically applied to affected instances.
Event History
Jan 15, 2025
CVE Published
via MITRE·04:12 PM
Data Sourced
via MITRE·04:12 PM
RemedyDescriptionWeakness
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2020-8094?
CVE-2020-8094 has a high severity level due to its potential to allow attackers to execute code as SYSTEM.
2
How do I fix CVE-2020-8094?
To fix CVE-2020-8094, ensure your Bitdefender Antivirus Free 2020 is updated to the latest version that addresses this vulnerability.
3
What type of vulnerability is CVE-2020-8094?
CVE-2020-8094 is classified as an untrusted search path vulnerability.
4
Who is affected by CVE-2020-8094?
CVE-2020-8094 affects users of Bitdefender Antivirus Free 2020, particularly versions up to 1.0.16.152.
5
Can CVE-2020-8094 be exploited remotely?
CVE-2020-8094 requires local access to exploit, making it a low-privilege attack scenario.