7.1
Élevée
CVE-2022-33937 Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function
Description
Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain unauthorized delete access to the files stored on the server filesystem, with the privileges of the GeoDrive service: NT AUTHORITY\SYSTEM.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| GeoDrive 2.2 | premières → < 2.2 | 2.2 |
Autres CVE de GeoDrive
Les 6 CVE de GeoDrive →
CVE-2022-33922
Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities
7.0
Élevée
CVE-2022-33921
Dell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities
7.0
Élevée
CVE-2022-33920
Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability
7.8
Élevée
CVE-2022-33919
Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI
7.8
Élevée