Vulnerability · Published Feb 18, 2022 · Assigned by Bitdefender
CVE-2020-8107Process Control vulnerability in Bitdefender Antivirus Plus
High 8.2
In plain English
A high-severity security flaw in Antivirus Plus from Bitdefender. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).
Official description
A Process Control vulnerability in ProductAgentUI.exe as used in Bitdefender Antivirus Plus allows an attacker to tamper with product settings via a specially crafted DLL file. This issue affects: Bitdefender Antivirus Plus versions prior to 24.0.26.136. Bitdefender Internet Security versions prior to 24.0.26.136. Bitdefender Total Security versions prior to 24.0.26.136.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bitdefender | Antivirus Plus | unspecified – before 24.0.26.136 |
| Bitdefender | Internet Security | unspecified – before 24.0.26.136 |
| Bitdefender | Total Security | unspecified – before 24.0.26.136 |
Weakness: CWE-114 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H