Yrl: >> Passage Drive For Box >> 1.0.0 Security Vulnerabilities
Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the product is running.
CVSS Score
7.8
EPSS Score
0.001
Published
2022-07-20