Path Traversal Vulnerability in Dell GeoDrive Software
CVE-2022-33937

7.1HIGH

Key Information:

Vendor

Dell
Status
Geodrive
Vendor
CVE Published:
22 September 2022

What is CVE-2022-33937?

Dell GeoDrive versions 1.0 through 2.2 are affected by a Path Traversal vulnerability within the reporting function. This issue allows a local attacker with low privileges to exploit the flaw, potentially gaining unauthorized access to delete files on the server filesystem. The vulnerability can be leveraged to execute operations with the privileges of the GeoDrive service, specifically NT AUTHORITY\SYSTEM, thereby posing serious risks to data integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

GeoDrive < 2.2

References

https://www.dell.com/support/kbdoc/000203632

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.