CVE-2022-0357: bitdefender antivirus_plus Unquoted Search Path or Element

Vulnerability summary

CVE-2022-0357 is a high (CVSS 7.8) Unquoted Search Path or Element vulnerability in bitdefender antivirus_plus. EPSS estimates a 0.19% chance of exploitation in the next 30 days, higher than 7.8% of scored vulnerabilities.

Timeline

1. 24-05-2023
   PublishedVulnerability first disclosed.
2. 16-01-2025
   Last modifiedVulnerability information updated.

Description

Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM. This issue affects: Bitdefender Total Security versions prior to 26.0.10.45. Bitdefender Internet Security versions prior to 26.0.10.45. Bitdefender Antivirus Plus versions prior to 26.0.10.45.

• CWE-428Unquoted Search Path or ElementThe product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.