Back to Database
Status published
Critical
CVE-2018-8955
The installer for BitDefender GravityZone relies on an encoded string...
Vulnerability Description
The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitrary code by changing the filename while leaving the file's digital signature unchanged.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-8955
Credits & Attribution
No credits recorded in the NVD database.
References
More from bitdefender
View All →CVE-2019-15295
An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions...
High
7.8
CVE-2019-14242
An issue was discovered in Bitdefender products for Windows (Bitdefender...
Medium
6.7
CVE-2019-12612
An issue was discovered in Bitdefender BOX firmware versions before...
High
7.8
CVE-2019-12611
An issue was discovered in Bitdefender BOX firmware versions before...
Medium
4.4
CVE-2018-6183
BitDefender Total Security 2018 allows local users to gain privileges...
High
7.8
Affected Vendor
bitdefender
View all reports →Affected Software
gravityzone
Vulnerable Versions:
Unknown
Timeline
Official Publish:
October 24th, 2018
Last Modified:
August 5th, 2024
Added to House:
July 20th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.