CVE-2022-33922CWE-276

Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities

High · published October 12, 2022

CVSS v3.1
7.0
EPSS
0%
Percentile
5.1
In the wild
Unconfirmed
What it is

Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context. Dell recommends customers to upgrade at the earliest opportunity.

The record
Technical detail
CVSS v3.1
7.0 · HIGH
Vector
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00162 · 5.1th percentile
Weakness
CWE-276 · Incorrect Default Permissions
Published
2022-10-12T19:25Z
EPSS history
Timeline
  • 12 OCT 19:25Z
    Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities
    cvelistv5