Bitdefender Box 2 Firmware — known CVE vulnerabilities

Every CVE whose affected-product data names Bitdefender Box 2 Firmware, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-17096 — CVSS 9.0 (critical): A OS Command Injection vulnerability in the bootstrap stage of Bitdefender BOX 2 allows the manipulation of the `get_image_url()` function…
• CVE-2019-17102 — CVSS 8.3 (high): An exploitable command execution vulnerability exists in the recovery partition of Bitdefender BOX 2, version 2.0.1.91. The API method…
• CVE-2019-17095 — CVSS 8.1 (high): A command injection vulnerability has been discovered in the bootstrap stage of Bitdefender BOX 2, versions 2.1.47.42 and 2.1.53.45. The…