CVE-2020-8107 HIGH

CVE-2020-8107: Process Control vulnerability in Bitdefender Antivirus Plus

Vendor Bitdefender
Product Antivirus Plus
Weakness CWE-114
Published February 18, 2022
Last update September 16, 2024
View on NVD All CVEs

CVSS base score

8.2/10
Attack vector Local
Attack complexity Low
Privileges required Low
User interaction Required
Confidentiality High
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

What the vulnerability does

01Description

A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.

Key dates

02Disclosure timeline

February 18, 2022 CVE published
September 16, 2024 Record updated