CVE-2019-12611
Medium
Description
An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of the product. Specially crafted packets sent to the miniupnpd implementation in result in the device allocating memory without freeing it later. This behavior can cause the miniupnpd component to crash or to trigger a device reboot.
SeverityMedium
CVSS4.4
Exploit probability—
ProductBitdefender Box Firmware
PublishedOct 17, 2019
First seenOct 17, 2019
How to fix
Update
- bitdefender box_firmware2.1.37.37-34 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitdefender box_firmware | v < 2.1.37.37-34 | 2.1.37.37-34 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.