CVE-2022-0357: Improper Quoting Path Issue in Bitdefender Total Security
First published: Wed May 24 2023(Updated: )
Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45.
Credit: cve-requests@bitdefender.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Bitdefender Total Security | <26.0.10.45 | |
| BitDefender Internet Security | <26.0.10.45 | |
| Bitdefender Antivirus Plus | <26.0.10.45 |
Remedy
An automatic update to version 26.0.10.45 or higher fixes the issue.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-0357?
CVE-2022-0357 is an Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus, which allows an attacker to elevate privileges to SYSTEM.
Which software versions are affected by CVE-2022-0357?
CVE-2022-0357 affects Bitdefender Total Security versions prior to 26.0.10.45, Bitdefender Internet Security versions prior to 26.0.10.45, and Bitdefender Antivirus Plus versions prior to 26.0.10.45.
What is the severity of CVE-2022-0357?
CVE-2022-0357 has a severity rating of high.
How can an attacker exploit CVE-2022-0357?
An attacker can exploit CVE-2022-0357 to elevate privileges to SYSTEM.
Is there a fix available for CVE-2022-0357?
Yes, a fix is available for CVE-2022-0357. Update Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus to version 26.0.10.45 or later.
- collector/nvd-latest
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/title
- agent/references
- agent/remedy
- agent/last-modified-date
- agent/weakness
- agent/author
- agent/tags
- agent/event
- agent/description
- agent/first-publish-date
- vendor/bitdefender
- canonical/bitdefender total security
- canonical/bitdefender internet security
- canonical/bitdefender antivirus plus