CVE-2024-13870
CVE-2024-13870 is a medium-severity vulnerability in Bitdefender Box Firmware with a CVSS 3.x base score of 5.7. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low. The underlying weakness is classified as CWE-1328.
Key facts
- Severity: Medium (CVSS 3.x base score 5.7)
- CVSS v4: 1.8
- EPSS exploit prediction: 0% (6th percentile)
- Actively exploited: Not listed in CISA KEV
- EU (EUVD) id: EUVD-2024-54187
- Weakness: CWE-1328
- Affected product: Bitdefender Box Firmware
- Published:
- Last modified:
Description
An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows an unauthenticated attacker to downgrade the device's firmware to an older, potentially vulnerable version of a Bitdefender-signed firmware. The attack requires Bitdefender BOX to be booted in Recovery Mode and that the attacker be present within the WiFi range of the BOX unit.
Frequently asked questions
- What is CVE-2024-13870?
- An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows an unauthenticated attacker to downgrade the device's firmware to an older, potentially vulnerable version of a Bitdefender-signed firmware. The attack requires Bitdefender BOX to be booted in Recovery Mode and that the attacker be present within the WiFi range of the BOX unit.
- How severe is CVE-2024-13870?
- CVE-2024-13870 has a CVSS 3.x base score of 5.7, rated medium severity. It is exploitable over an adjacent network with low attack complexity, requires no privileges and user interaction. Impact on confidentiality is none, integrity high, and availability none.
- Is CVE-2024-13870 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 0% (6th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2024-13870?
- CVE-2024-13870 affects Bitdefender Box Firmware. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2024-13870?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- Does CVE-2024-13870 have an EU (EUVD) identifier?
- Yes. CVE-2024-13870 is tracked in the ENISA EU Vulnerability Database (EUVD) as EUVD-2024-54187.
- When was CVE-2024-13870 published?
- CVE-2024-13870 was published on 2025-03-12 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:o:bitdefender:box_firmware:*:*:*:*:*:*:*:*
More vulnerabilities in Bitdefender Box Firmware
- CVE-2024-13871 — High (CVSS 8.8): A command injection vulnerability exists in the /check_image_and_trigger_recovery API endpoint of Bitdefender Box 1…
- CVE-2019-12612 — High (CVSS 7.8): An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that allows an attacker to pass…
- CVE-2024-13872 — High (CVSS 7.5): Bitdefender Box, versions 1.3.11.490 through 1.3.11.505, uses the insecure HTTP protocol to download assets over the…
- CVE-2019-12611 — Medium (CVSS 4.4): An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability…
All CVEs affecting Bitdefender Box Firmware →
Other CWE-1328 vulnerabilities
- CVE-2025-5825 — High (CVSS 7.5): Autel MaxiCharger AC Wallbox Commercial Firmware Downgrade Remote Code Execution Vulnerability. This vulnerability…
- CVE-2025-8321 — Medium (CVSS 6.8): Tesla Wall Connector Firmware Downgrade Vulnerability. This vulnerability allows physically present attackers to…
- CVE-2025-29989 — Low (CVSS 3.1): Dell Client Platform BIOS contains a Security Version Number Mutable to Older Versions vulnerability. A high privileged…