Vulnerability · Published Nov 9, 2021 · Assigned by Bitdefender
CVE-2021-3641Improper Link Resolution Before File Access in Bitdefender GravityZone (VA-9921)
Medium 6.1
In plain English
A medium-severity security flaw in GravityZone from Bitdefender. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 29% of all known vulnerabilities).
Severity (CVSS 3.1)6.1Medium
Exploit odds (30 days)0.4%top 70.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bitdefender | GravityZone | unspecified – through 7.1.2.33 |
Weakness: CWE-59 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H