Unrated severityNVD Advisory· Published Mar 12, 2025· Updated Mar 12, 2025
Unauthenticated Firmware Downgrade in Bitdefender Box v1
CVE-2024-13870
Description
An improper access control vulnerability exists in Bitdefender Box 1 (firmware version 1.3.52.928 and below) that allows an unauthenticated attacker to downgrade the device's firmware to an older, potentially vulnerable version of a Bitdefender-signed firmware. The attack requires Bitdefender BOX to be booted in Recovery Mode and that the attacker be present within the WiFi range of the BOX unit.
Affected products
2- Range: <=1.3.52.928
- Bitdefender/BOX v1v5Range: 0
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1News mentions
0No linked articles in our index yet.