Vulnerability Details CVE-2022-34866
Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the product is running.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 25.8%
CVSS Severity
CVSS v3 Score 7.8
References
Products affected by CVE-2022-34866
-
cpe:2.3:a:yrl:passage_drive:1.4.0
-
cpe:2.3:a:yrl:passage_drive:1.5.1.0
-
cpe:2.3:a:yrl:passage_drive_for_box:1.0.0