Vulnerability Details CVE-2022-33920
Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.3%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2022-33920
-
cpe:2.3:a:dell:geodrive:2.1.0
-
cpe:2.3:a:dell:geodrive:2.1.1
-
cpe:2.3:a:dell:geodrive:2.1.2
-
cpe:2.3:a:dell:geodrive:2.1.3.0
-
cpe:2.3:a:dell:geodrive:2.1.3.3
-
cpe:2.3:a:dell:geodrive:2.1.3.4
-
cpe:2.3:a:dell:geodrive:2.2.1
-
cpe:2.3:a:dell:geodrive:2.2.2