CVE-2022-0357
Bitdefender Internet Security vulnerability analysis and mitigation

Overview

Unquoted Search Path or Element vulnerability (CVE-2022-0357) was discovered in the Vulnerability Scan component of Bitdefender security products. The vulnerability affects Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus versions prior to 26.0.10.45. This security issue was disclosed on May 24, 2023 (Vendor Advisory).

Technical details

The vulnerability is classified as an Unquoted Search Path or Element vulnerability (CWE-428). It received a CVSS v3.1 base score of 7.8 HIGH from NIST (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), while Bitdefender assigned it a score of 6.7 MEDIUM (CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H). The vulnerability requires local access with low attack complexity (NVD).

Impact

If exploited, this vulnerability allows an attacker to elevate privileges to SYSTEM level, potentially gaining complete control over the affected system (Vendor Advisory).

Mitigation and workarounds

Bitdefender has addressed this vulnerability in version 26.0.10.45 of the affected products. Users should ensure their Bitdefender products are updated to version 26.0.10.45 or higher (Vendor Advisory).

Additional resources


SourceThis report was generated using AI

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management