CVE-2018-8955 Code injection in n/a
Remote attackers can execute arbitrary code by manipulating the installer filename to alter metadata URLs, bypassing digital signature checks.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-8955?
CVE-2018-8955 is a critical code injection vulnerability in n/a, published on 24 Oct 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The installer for BitDefender GravityZone relies on an encoded string in a filename to determine the URL for installation metadata, which allows remote attackers to execute arbitrary code by changing the filename while leaving the file's digital signature unchanged.
Weakness: CWE-347
Which versions are affected by CVE-2018-8955?
It affects 1 product.
Products include Bitdefender Gravityzone.
How do I fix CVE-2018-8955?
No fix has been published for CVE-2018-8955 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2018-8955 being exploited?
There is no known exploitation of CVE-2018-8955 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2017-8931 Privilege escalation in n/a
- CVE-2025-2244 Insecure PHP deserialization issue in GravityZone Console (VA-12634)
- CVE-2024-6980 Verbose error handling issue in GravityZone Update Server proxy service
- CVE-2022-2830 Deserialization of Untrusted Data in GravityZone Console On-Premise (VA-10573)
- CVE-2024-4177 Host whitelist parser issue in GravityZone Console On-Premise (VA-11554)
Sources
Also known as GHSA-mf9c-7798-47gf.