7.1
High
CVE-2022-33937 Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function
Description
Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain unauthorized delete access to the files stored on the server filesystem, with the privileges of the GeoDrive service: NT AUTHORITY\SYSTEM.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| GeoDrive 2.2 | earliest → < 2.2 | 2.2 |
Other CVEs of GeoDrive
The 6 CVEs of GeoDrive →
CVE-2022-33922
Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities
7.0
High
CVE-2022-33921
Dell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities
7.0
High
CVE-2022-33920
Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability
7.8
High
CVE-2022-33919
Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI
7.8
High