CVE-2023-6154: Local privilege escalation in Bitdefender Total Security (VA-11168)
A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-6154?
CVE-2023-6154 has been rated as a high severity vulnerability due to its potential to allow the execution of malicious code.
How can I mitigate CVE-2023-6154?
To mitigate CVE-2023-6154, ensure that your Bitdefender software is updated to the latest version, as patches may address the configurations that allow the vulnerability to be exploited.
What products are affected by CVE-2023-6154?
CVE-2023-6154 affects Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, and Bitdefender Antivirus Free.
What impact does CVE-2023-6154 have on my system?
CVE-2023-6154 can potentially allow an attacker to alter the expected behavior of the affected software, which may lead to unauthorized actions on the system.
Is there a fix available for CVE-2023-6154?
Yes, a fix for CVE-2023-6154 is available through the latest updates from Bitdefender for the affected products.