CVE-2024-13871: Unauthenticated Command Injection in Bitdefender BOX v1

Published Mar 12, 2025

Updated

A command injection vulnerability exists in the /checkimageandtriggerrecovery API endpoint of Bitdefender Box 1 (firmware version 1.3.11.490). This flaw allows an unauthenticated, network-adjacent attacker to execute arbitrary commands on the device, potentially leading to full remote code execution (RCE).

Affected Software

3 affected components

Bitdefender Box 1

All of the following

Bitdefender BOX firmware=1.3.11.490

Bitdefender BOX

Remediation

Information

An automatic update to firmware version 1.3.11.505 fixes the issue.

Event History

Mar 12, 2025

CVE Published

via MITRE·11:48 AM

Data Sourced

via MITRE·11:48 AM

RemedyDescriptionWeakness

Data Sourced

via NVD·12:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2024-13871?

CVE-2024-13871 is classified as a critical severity vulnerability due to its potential to allow unauthorized command execution.

What systems are affected by CVE-2024-13871?

CVE-2024-13871 affects the Bitdefender Box 1 running firmware version 1.3.11.490.

How do I fix CVE-2024-13871?

To address CVE-2024-13871, update the Bitdefender Box 1 to the latest firmware version provided by Bitdefender.

Can CVE-2024-13871 be exploited remotely?

Yes, CVE-2024-13871 can be exploited by unauthenticated, network-adjacent attackers.

What types of attacks can CVE-2024-13871 enable?

CVE-2024-13871 can enable arbitrary command execution on the affected device, potentially leading to a full system compromise.