CVE-2022-3369
High
Description
An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privileged registry keys by pointing a Registry symlink to a privileged key. This issue affects: Bitdefender Engines versions prior to 7.92659. It also affects Bitdefender Antivirus Free, Bitdefender Antivirus Plus, Bitdefender Internet Security, Bitdefender Total Security, as well as Bitdefender Endpoint Security Tools for Windows with engine versions prior to 7.92659.
SeverityHigh
CVSS8.6
Exploit probability—
ProductBitdefender Engines
PublishedNov 1, 2022
First seenNov 1, 2022
Weakness typeCWE-269Improper privilege management
How to fix
Update
- bitdefender engines7.92659 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| bitdefender engines | v < 7.92659 | 7.92659 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.