CVE-2023-6154
Local privilege escalation in Bitdefender Total Security (VA-11168)
- State
- Published
- Severity
- 7.8 High
- Published
- Apr 1, 2024
- Updated
- Aug 12, 2024
- Reserved
- Nov 15, 2023
Description
A configuration setting issue in seccenter.exe as used in Bitdefender Total Security, Bitdefender Internet Security, Bitdefender Antivirus Plus, Bitdefender Antivirus Free allows an attacker to change the product's expected behavior and potentially load a third-party library upon execution. This issue affects Total Security: 27.0.25.114; Internet Security: 27.0.25.114; Antivirus Plus: 27.0.25.114; Antivirus Free: 27.0.25.114.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 7.8 High | CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | Bitdefender |
Weaknesses
- CWE-15 External Control of System or Configuration Setting
Affected Products
| Product | Versions |
|---|---|
Total SecurityBitdefender |
|
Internet SecurityBitdefender |
|
Antivirus PlusBitdefender |
|
Antivirus FreeBitdefender |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.