{"affected":[{"affectedData":[{"product":"GravityZone Console On-Premise","vendor":"Bitdefender","versions":[{"lessThan":"6.29.2-1","status":"affected","version":"unspecified","versionType":"custom"}]},{"product":"GravityZone Cloud Console","vendor":"Bitdefender","versions":[{"lessThan":"6.27.2-2","status":"affected","version":"unspecified","versionType":"custom"}]}],"source":"cve-requests@bitdefender.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:cloud:*:*:*","matchCriteriaId":"973C0CA3-5E63-4375-823D-B3FF934F0819","versionEndExcluding":"6.27.2-2","vulnerable":true},{"criteria":"cpe:2.3:a:bitdefender:gravityzone:*:*:*:*:on-premise:*:*:*","matchCriteriaId":"0EF8A286-8C5E-462F-A4E2-A7FD59B1C794","versionEndExcluding":"6.29.2-1","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Deserialization of Untrusted Data vulnerability in the message processing component of Bitdefender GravityZone Console allows an attacker to pass unsafe commands to the environment. This issue affects: Bitdefender GravityZone Console On-Premise versions prior to 6.29.2-1. Bitdefender GravityZone Cloud Console versions prior to 6.27.2-2."},{"lang":"es","value":"Una vulnerabilidad de Deserialización de Datos No Confiables en el componente de procesamiento de mensajes de Bitdefender GravityZone Console permite a un atacante pasar comandos no seguros al entorno. Este problema afecta a: Bitdefender GravityZone Console On-Premise versiones anteriores a 6.29.2-1. Bitdefender GravityZone Cloud Console versiones anteriores a 6.27.2-2"}],"id":"CVE-2022-2830","lastModified":"2026-06-17T04:42:39.800","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"ADJACENT_NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"cve-requests@bitdefender.com","type":"Secondary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":9.8,"baseSeverity":"CRITICAL","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":3.9,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2022-09-05T12:15:08.740","references":[{"source":"cve-requests@bitdefender.com","tags":["Vendor Advisory"],"url":"https://www.bitdefender.com/support/security-advisories/deserialization-of-untrusted-data-in-gravityzone-console-va-10573"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://www.bitdefender.com/support/security-advisories/deserialization-of-untrusted-data-in-gravityzone-console-va-10573"}],"sourceIdentifier":"cve-requests@bitdefender.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-502"}],"source":"cve-requests@bitdefender.com","type":"Secondary"}]}