CVE-2019-12611 - CVE House
Back to Database
Status published Medium CVE-2019-12611

An issue was discovered in Bitdefender BOX firmware versions before...

Vulnerability Description

An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of the product. Specially crafted packets sent to the miniupnpd implementation in result in the device allocating memory without freeing it later. This behavior can cause the miniupnpd component to crash or to trigger a device reboot.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-12611

Credits & Attribution

No credits recorded in the NVD database.

References

More from bitdefender

View All →
CVE-2019-15295
An Untrusted Search Path vulnerability in the ServiceInstance.dll library versions...
High 7.8
CVE-2019-14242
An issue was discovered in Bitdefender products for Windows (Bitdefender...
Medium 6.7
CVE-2019-12612
An issue was discovered in Bitdefender BOX firmware versions before...
High 7.8
CVE-2018-8955
The installer for BitDefender GravityZone relies on an encoded string...
Critical 9.8
CVE-2018-6183
BitDefender Total Security 2018 allows local users to gain privileges...
High 7.8

Affected Vendor

bitdefender

View all reports →

Affected Software

box firmware
Vulnerable Versions:
0

Timeline

Official Publish: October 17th, 2019
Last Modified: August 4th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.