Vulnerability · Published Sep 5, 2022 · Assigned by Bitdefender
CVE-2022-2830Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573)
High 8.8
In plain English
A high-severity unsafe deserialization in GravityZone Cloud Console from Bitdefender. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.9% (higher than 61% of all known vulnerabilities).
Severity (CVSS 3.1)8.8High
Exploit odds (30 days)0.9%top 38.9% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe commands to the environment. This issue affects: Bitdefender GravityZone Console On-Premise versions prior to 6.29.2-1. Bitdefender GravityZone Cloud Console versions prior to 6.27.2-2.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Bitdefender | GravityZone Console On-Premise | unspecified – before 6.29.2-1 |
| Bitdefender | GravityZone Cloud Console | unspecified – before 6.27.2-2 |
Weakness: CWE-502 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H