Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.4

Bitdefender BOX firmware may crash or reboot from malformed network packets

CVE-2019-12611 · published 7 years ago
Summary

Versions of Bitdefender BOX firmware older than 2.1.37.37-34 can be sent special network messages that cause the device to use memory incorrectly. Over time this can make the mini‑upnp service fail, leading to a crash or an unwanted reboot. Update the firmware to the latest version to prevent the issue.

What to do
  • Update bitdefender box_firmware to version 2.1.37.37-34 or later.
Affected software
VendorProductAffected versions
bitdefender box_firmware < 2.1.37.37-34
cpe:2.3:o:bitdefender:box_firmware:*:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of the product. Specially crafted packets sent to the miniupnpd implementation ...
An issue was discovered in Bitdefender BOX firmware versions before 2.1.37.37-34 that affects the general reliability of the product. Specially crafted packets sent to the miniupnpd implementation in result in the device allocating memory without freeing it later. This behavior can cause the miniupnpd component to crash or to trigger a device reboot.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.4 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-770Allocation of Resources Without Limits
Timeline
Published17 Oct 2019
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2019-12611 · NVD
Track software like this
Free during beta