Skip to main content

Gravityzone CVE-2021-3641

MEDIUM
Improper Link Resolution Before File Access (CWE-59)
2021-11-09 cve-requests@bitdefender.com
Microsoft Denial Of Service Gravityzone
6.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
6.1 MEDIUM
AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
High

Lifecycle Timeline

1
CVE Published
Nov 09, 2021 - 14:15 nvd
MEDIUM 6.1

DescriptionNVD

Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions.

AnalysisAI

Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of. Rated medium severity (CVSS 6.1), this vulnerability is low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-59. Improper Link Resolution Before File Access ('Link Following') vulnerability in the EPAG component of Bitdefender Endpoint Security Tools for Windows allows a local attacker to cause a denial of service. This issue affects: Bitdefender GravityZone version 7.1.2.33 and prior versions. Affected products include: Bitdefender Gravityzone. Version information: version 7.1.2.33.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Gravityzone

View all
CVE-2018-8955 CRITICAL POC
9.8 Oct 24

The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installatio
CVE-2014-5350 MEDIUM POC
5.0 Aug 19

Multiple directory traversal vulnerabilities in Bitdefender GravityZone before 5.1.11.432 allow remote attackers to read
CVE-2021-3554 CRITICAL
10.0 Nov 24

Improper Access Control vulnerability in the patchesUpdate API as implemented in Bitdefender Endpoint Security Tools for
CVE-2025-2244 CRITICAL
9.5 Apr 04

A vulnerability in the sendMailFromRemoteSource method in Emails.php as used in Bitdefender GravityZone Console unsafely
CVE-2024-4177 CRITICAL
9.8 Jun 06

A host whitelist parser issue in the proxy service implemented in the GravityZone Update Server allows an attacker to ca
CVE-2022-2830 CRITICAL
9.8 Sep 05

Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console a
CVE-2021-3823 CRITICAL
9.8 Oct 28

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer compone
CVE-2024-6980 CRITICAL
9.2 Jul 31

A verbose error handling issue in the proxy service implemented in the GravityZone Update Server allows an attacker to c
CVE-2021-3960 HIGH
7.8 Dec 16

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer compone
CVE-2022-0677 HIGH
7.5 Apr 07

Improper Handling of Length Parameter Inconsistency vulnerability in the Update Server component of Bitdefender Endpoint
CVE-2021-3959 HIGH
7.5 Dec 16

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService component of Bitdefender Endpoint Security To
CVE-2021-3553 HIGH
7.5 Nov 24

A Server-Side Request Forgery (SSRF) vulnerability in the EPPUpdateService of Bitdefender Endpoint Security Tools allows

Same weakness CWE-59 – Improper Link Resolution Before File Access

View all
CVE-2015-1130 HIGH POC
7.8
CVE-2026-41091 HIGH POC
7.8
CVE-2016-6664 HIGH POC
7.0
CVE-2025-60710 HIGH POC
7.8
CVE-2024-57728 HIGH POC
7.2
CVE-2025-21391 HIGH
7.1
CVE-2025-48384 HIGH
8.0
CVE-2024-28189 CRITICAL POC
10.0

Same technique Denial Of Service

View all
CVE-2015-5119 CRITICAL POC
9.8
CVE-2011-2462 CRITICAL POC
9.8
CVE-2011-0611 HIGH POC
8.8
CVE-2012-1889 HIGH POC
8.8
CVE-2012-0507 CRITICAL POC
9.8
CVE-2014-1761 HIGH POC
7.8
CVE-2015-5122 CRITICAL POC
9.8
CVE-2011-0609 HIGH POC
7.8

Share

CVE-2021-3641 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy