CVE-2024-2223

Summary

An Incorrect Regular Expression vulnerability in Bitdefender GravityZone Update Server allows an attacker to cause a Server Side Request Forgery and reconfigure the relay. This issue affects the following products that include the vulnerable component: 

Bitdefender Endpoint Security for Linux version 7.0.5.200089 Bitdefender Endpoint Security for  Windows version 7.9.9.380 GravityZone Control Center (On Premises) version 6.36.1

Affected Software

VendorProductVersion RangeStatus
BitdefenderGravityZone Control Center (On Premises)6.36.1affected
BitdefenderEndpoint Security for Windows7.9.9.380affected
BitdefenderEndpoint Security for Linux7.0.5.200089affected

Weaknesses

  • CWE-185: CWE-185: Incorrect Regular Expression

ADP Enrichment

CVE Program Container

Additional References

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: total

References