---
cve: "CVE-2022-0357"
severity: "MEDIUM"
cvss: 6.7
epss: "19%"
vendor: "Bitdefender"
kev: false
exploited: false
published: "2023-05-24 08:15:08"
tags: [cve, security, medium]
source: tsecurity.de CVE-Dossier
exported: "2026-09-12T08:09:42+02:00"
---

# CVE-2022-0357

> 6.7 MEDIUM

## Beschreibung

Unquoted Search Path or Element vulnerability in the Vulnerability Scan component of Bitdefender Total Security, Bitdefender Internet Security, and Bitdefender Antivirus Plus allows an attacker to elevate privileges to SYSTEM.

This issue affects:

Bitdefender Total Security
versions prior to 26.0.10.45.
Bitdefender Internet Security
versions prior to 26.0.10.45.
Bitdefender Antivirus Plus
versions prior to 26.0.10.45.

## CVSS-Vektor

```
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
```

| Metrik | Wert | Bewertung |
|---|---|---|
| AV Angriffsvektor | Lokal | good |
| AC Komplexität | Gering | bad |
| PR Privilegien | Hoch | good |
| UI Interaktion | Keine | bad |
| S Scope | Unverändert | good |
| C Vertraulichkeit | Hoch | bad |
| I Integrität | Hoch | bad |
| A Verfügbarkeit | Hoch | bad |

## Referenzen

- <https://www.bitdefender.com/support/security-advisories/improper-quoting-path-issue-in-bitdefender-total-security>

---
_Exportiert aus dem [tsecurity.de CVE-Dossier](https://tsecurity.de/cve?cve=CVE-2022-0357) · Datenquellen: EUVD (ENISA), NVD, OSV, CISA KEV, FIRST EPSS, Exploit-DB, BSI BITS_