📦 Box Firmware

An unauthenticated command injection vulnerability in Bitdefender Box 1 allows network-adjacent attackers to execute arbitrary commands on the device, potentially leading to full system compromise. Th...

This vulnerability allows network-adjacent attackers to perform man-in-the-middle attacks against Bitdefender Box devices during updates, potentially leading to remote code execution. The insecure HTT...

An unauthenticated attacker within WiFi range can downgrade Bitdefender Box 1 firmware to older vulnerable versions when the device is in Recovery Mode. This affects Bitdefender Box 1 devices running ...