PT-2022-21911 · Dell · Dell Geodrive

Published 2022-10-12 · Updated 2022-10-14 · CVE-2022-33922

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Dell GeoDrive versions prior to 2.2

Description The issue is related to Insecure File and Folder Permissions, which could be exploited by a low privilege attacker to execute arbitrary code in the SYSTEM security context.

Recommendations For versions prior to 2.2, upgrade to version 2.2 or later at the earliest opportunity.

Fix

Incorrect Default Permissions

Weakness Enumeration

CWE-276

Related Identifiers

CVE-2022-33922

Affected Products

Dell Geodrive

References · 3

• https://osv.dev/vulnerability/CVE-2022-33922 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-33922 · Security Note
• https://dell.com/support/kbdoc/000203632 · Vendor Advisory