CVE-2022-0677: bitdefender endpoint_security_tools
Vulnerability summary
CVE-2022-0677 is a high (CVSS 7.5) vulnerability in bitdefender endpoint_security_tools. EPSS estimates a 1.25% chance of exploitation in the next 30 days, higher than 68.9% of scored vulnerabilities.
Timeline
- 07-04-2022PublishedVulnerability first disclosed.
- 16-09-2024Last modifiedVulnerability information updated.
Description
Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint Security Tools (in relay role), GravityZone (in Update Server role) allows an attacker to cause a Denial-of-Service. This issue affects: Bitdefender Update Server versions prior to 3.4.0.276. Bitdefender GravityZone versions prior to 26.4-1. Bitdefender Endpoint Security Tools for Linux versions prior to 6.2.21.171. Bitdefender Endpoint Security Tools for Windows versions prior to 7.4.1.111.
CVSS metrics
3 scores · 2 sources · 2 versions- NVDNIST7.5HighCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS trend
Probability
1.25%
Chance of exploitation in the next 30 days
Percentile
69%
Versus all other CVEs
30-day change
0.00 pp
From 1.25% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Bitdefender5 products
- endpoint_security_tools< 6.2.21.171 | < 7.4.1.111
- endpoint security tools for linux≥ unspecified, < 6.2.21.171
- endpoint security tools for windows≥ unspecified, < 7.4.1.111
- gravityzone≥ unspecified, < 26.4-1 | < 26.4-1
- update_server≥ unspecified, < 3.4.0.276 | < 3.4.0.276
1 vendor · 5 products