PatchTheCVEbdr suite vulnerabilities and fixes
Recent CVEs affecting bdr suite, with upgrade or downgrade steps. 5 tracked.
Also searched as: bdrsuite.
bdr suite has 5 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 4. Most recent: 2022-04-04. Highest priority: CVE-2021-26472 (score 61/100).
- CVE-2021-43458 HIGH 7.8 DOWNGRADE An Unquoted Service Path vulnerability exits in Vembu BDR 4.2.0.1 via a specially crafted file in the (1) hsfl
- CVE-2021-26474 HIGH 8.6 UPGRADE DOWNGRADE Various Vembu products allow an attacker to execute a (non-blind) http-only Cross Site Request Forgery (Other
- CVE-2021-26473 CRITICAL 9.8 UPGRADE UPGRADE In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 the http API located at /sgwebservice_o.php actio
- CVE-2021-26472 CRITICAL 10.0 UPGRADE UPGRADE In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /co
- CVE-2021-26471 CRITICAL 9.8 UPGRADE UPGRADE In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1, the http API located at /sgwebservice_o.php acce
FAQ
How do I fix bdr suite vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bdr suite being exploited right now?
None of the tracked bdr suite CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bdr suite CVE should I patch first?
CVE-2021-26472 currently ranks highest (61/100): In VembuBDR before 4.2.0.1 and VembuOffsiteDR before 4.2.0.1 installed on Windows, the http API located at /co.