Back

Bitdefender SafePay exec Command Injection Remote Code Execution Vulnerability

Publication date: January 29th, 2019


CVE ID:
CVE-2019-6736
CVSS scrore:
8.8 - https://www.first.org/cvss/calculator/3.0#CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected vendors:
Bitdefender
Affected products:
Bitdefender SafePay
Vulnerability details:

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Bitdefender SafePay. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file.

The specific flaw exists within the processing of tiscript. When processing the System.Exec method the application does not properly validate a user-supplied string before using it to execute a system call. An attacker can leverage this vulnerability to execute code in the context of the current process.

Additional details:
This issue was resolved in version 23.0.11.44.
Disclosure timeline:
2018-09-11 - Vulnerability reported to vendor 2019-01-29 - Coordinated public release of advisory
Credit:
Juho Nurminen