What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2022-3369.

What is the severity of CVE-2022-3369?

CVE-2022-3369 has a severity level of high.

What is the affected software?

The affected software is Bitdefender Engines versions prior to 7.92659.

How can an attacker exploit this vulnerability?

An attacker can exploit this vulnerability by pointing a Registry symlink to a privileged key and deleting privileged registry keys.

Is there a fix available for CVE-2022-3369?

Yes, a fix is available for CVE-2022-3369 in Bitdefender Engines version 7.92659 and above.

Vulnerability/
CVE-2022-3369

high

8.6

CWE

269

1/11/2022

17/9/2024

CVE-2022-3369: Improper handling of registry symbolic links in Bitdefender Engines

First published: Tue Nov 01 2022(Updated: )

An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privileged registry keys by pointing a Registry symlink to a privileged key. This issue affects: Bitdefender Engines versions prior to 7.92659. It also affects Bitdefender Antivirus Free, Bitdefender Antivirus Plus, Bitdefender Internet Security, Bitdefender Total Security, as well as Bitdefender Endpoint Security Tools for Windows with engine versions prior to 7.92659.

Credit: cve-requests@bitdefender.com cve-requests@bitdefender.com

Affected Software	Affected Version	How to fix
Bitdefender Engines	<7.92659

Remedy

An automatic update to Engines version 7.92659 fixes the issue.

Never miss a vulnerability like this again

Reference Links

https://www.bitdefender.com/support/security-advisories/improper-handling-of-registry-symbolic-links-in-bitdefender-engines-va-10562

Frequently Asked Questions

What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-3369.
What is the severity of CVE-2022-3369?
CVE-2022-3369 has a severity level of high.
What is the affected software?
The affected software is Bitdefender Engines versions prior to 7.92659.
How can an attacker exploit this vulnerability?
An attacker can exploit this vulnerability by pointing a Registry symlink to a privileged key and deleting privileged registry keys.
Is there a fix available for CVE-2022-3369?
Yes, a fix is available for CVE-2022-3369 in Bitdefender Engines version 7.92659 and above.

collector/nvd-index
agent/type
agent/softwarecombine
agent/title
agent/weakness
agent/severity
agent/references
collector/mitre-cve
source/MITRE
agent/remedy
agent/description
agent/first-publish-date
agent/event
collector/nvd-api
source/NVD
agent/software-canonical-lookup
agent/author
agent/last-modified-date
agent/tags
agent/source
vendor/bitdefender
canonical/bitdefender engines

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.