Vulnerability Details CVE-2022-33920
Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 31.9%
CVSS Severity
CVSS v3 Score 7.8
Products affected by CVE-2022-33920
-
cpe:2.3:a:dell:geodrive:2.1.0
-
cpe:2.3:a:dell:geodrive:2.1.1
-
cpe:2.3:a:dell:geodrive:2.1.2
-
cpe:2.3:a:dell:geodrive:2.1.3.0
-
cpe:2.3:a:dell:geodrive:2.1.3.3
-
cpe:2.3:a:dell:geodrive:2.1.3.4
-
cpe:2.3:a:dell:geodrive:2.2.1
-
cpe:2.3:a:dell:geodrive:2.2.2