CVE-2021-3485

CVE-2021-3485 is an Improper Input Validation vulnerability in the Product Update feature of Bitdefender Endpoint Security Tools for Linux, affecting versions prior to 6.2.21.155. A man-in-the-middle attacker can exploit this flaw by abusing the DownloadFile function during product updates to achieve remote code execution. The vulnerability has a CVSS score of 6.6 (Medium), indicating a high impact on confidentiality, integrity, and availability, with high attack complexity and requiring high privileges for the attacker. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.