CVE-2022-34391

Summary: CVE-2022-34391 affects Dell Client BIOS prior to the remediated version. The issue is an improper input validation vulnerability that can be exploited by a local, authenticated attacker using an SMI to execute arbitrary code in SMRAM. Affected component: Dell Client BIOS (on Dell systems...

CVE-2022-34390

Summary: CVE-2022-34390 involves a use of an uninitialized variable in Dell BIOS that can be exploited by a local, authenticated attacker using an SMI to gain arbitrary code execution in SMRAM. The vulnerability affects Dell BIOS embedded in the motherboard’s firmware, enabling code execution wit...

CVE-2022-34390

Dell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-34390

Dell BIOS contains a use of uninitialized variable vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-33937

Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain unauthorized delete access to the files stored on the server filesystem, with the privileges of the GeoDrive...

CVE-2022-33937

Dell GeoDrive (versions 1.0–2.2) contains a Path Traversal vulnerability in the reporting function. A local, low-privileged attacker could exploit this flaw to delete files on the server’s filesystem with the GeoDrive service privilege (NT AUTHORITY\SYSTEM). Root cause: insufficient input/path va...

CVE-2022-33937

Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain unauthorized delete access to the files stored on the server filesystem, with the privileges of the GeoDrive...

CVE-2022-33922

CVE-2022-33922 affects Dell GeoDrive before version 2.2. The issue is insecure file and folder permissions that allow a low-privilege, local attacker to potentially execute arbitrary code in the SYSTEM context. Affected product/version: Dell GeoDrive prior to 2.2. Impact is defined as remote? No,...

CVE-2022-33922

Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context. Dell recommends customers to upgrade at the earlie...

CVE-2022-33922

Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context. Dell recommends customers to upgrade at the earlie...

CVE-2022-33921

Dell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context...

CVE-2022-33921

Dell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context...

CVE-2022-33921

Dell GeoDrive on Windows is affected by DLL hijacking in versions prior to 2.2 (CNVD notes 2.2.3). The root cause is an unsafe DLL search path that can be exploited by a local, low-privilege attacker to execute arbitrary code in the SYSTEM context. Affected component is the Dell GeoDrive DLL load...

CVE-2022-33920

Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context...

CVE-2022-33920

CVE-2022-33920 affects Dell GeoDrive prior to v2.2. The issue is an Unquoted File Path vulnerability that can allow a low-privilege attacker to execute arbitrary code in the SYSTEM context. Affected component: Dell GeoDrive executable/installation path with unquoted spaces. Impact: potential full...

CVE-2022-33920

Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context...

CVE-2022-33919

Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An authenticated non-admin user could potentially exploit this vulnerability and view sensitive information...

CVE-2022-33919

Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An authenticated non-admin user could potentially exploit this vulnerability and view sensitive information...

CVE-2022-33919

CVE-2022-33919 affects Dell GeoDrive GUI, versions 2.1–2.2. An authenticated non-admin user could disclose sensitive information due to an information-disclosure flaw in the GUI. The access is local (AV:L, PR:L) with no user interaction required, and the impact is confidentiality, integrity, and ...

CVE-2022-33918

Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploit this vulnerability and gain access to sensitive information...