BSI warning [CVE-2022-3369]
The Federal Office for Information Security (BSI) has in this message A report has been published stating that a local attacker can exploit a vulnerability in Bitdefender Antivirus to bypass security measures. This program is integrated as Managed Antivirus (MAV) in the RMM tool. The BSI (German Federal Office for Information Security) assigns a CVSS Base Score of 8.6 out of 10.
All partners with a Bitdefender engine version below 7.925659 are potentially at massive risk.
In addition to MAV, the standalone programs Bitdefender Total Security, Bitdefender Internet Security and Bitdefender Antivirus are also affected by this vulnerability.
What do I need to do now?
There's nothing you can do at this time. The manufacturer has started rolling out updates for MAV. A manual update via the RMM dashboard is not possible. The display of the correct engine version via the RMM dashboard is partially malfunctioning. The manufacturer has not yet responded to our inquiries.
Is there a viable alternative to the MAV?
Antivirus software alone is often not enough. Managed endpoint security solutions are the best way to protect your customers' infrastructure. We would be happy to support you in switching to [solution name]. SYNAXON Managed Endpoint Security. In EGIS you can easily... Service booking Perform the process. Automatic license management and pre-configured scripts for deployment on any number of devices are just two of the numerous advantages.
Update 28.11.2022:
According to the manufacturer, the shipped version of N-Able's Managed Antivirus is not affected. This was investigated by N-Able in conjunction with the manufacturer, Bitdefender.
Further information from the manufacturer: https://www.bitdefender.com/support/security-advisories/improper-handling-of-registry-symbolic-links-in-bitdefender-engines-va-10562/
Never miss an update again! Register now for our SYNAXON Services Newsfeed, so that important notifications land directly in your inbox.