CVE-2022-33920

CVE-2022-33920 affects Dell GeoDrive prior to v2.2. The issue is an Unquoted File Path vulnerability that can allow a low-privilege attacker to execute arbitrary code in the SYSTEM context. Affected component: Dell GeoDrive executable/installation path with unquoted spaces. Impact: potential full...

CVE-2022-33920

Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context...

CVE-2022-33919

Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An authenticated non-admin user could potentially exploit this vulnerability and view sensitive information...

CVE-2022-33919

Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An authenticated non-admin user could potentially exploit this vulnerability and view sensitive information...

CVE-2022-33919

CVE-2022-33919 affects Dell GeoDrive GUI, versions 2.1–2.2. An authenticated non-admin user could disclose sensitive information due to an information-disclosure flaw in the GUI. The access is local (AV:L, PR:L) with no user interaction required, and the impact is confidentiality, integrity, and ...

CVE-2022-33918

Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploit this vulnerability and gain access to sensitive information...

CVE-2022-33918

Dell GeoDrive vulnerability CVE-2022-33918 affects versions 2.1–2.2. Root cause is insufficient protection of sensitive data and unencrypted storage, enabling an authenticated non-admin user to disclose information via local access. Impact: confidentiality exposure (C:H, I:N, A:N) per CVE metrics...

CVE-2022-33918

Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploit this vulnerability and gain access to sensitive information...

CVE-2022-32493

Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-32493

CVE-2022-32493: Dell BIOS contains a stack-based buffer overflow that can be exploited by a local, authenticated attacker using an SMI to execute code in SMRAM. This affects Dell BIOS (embedded firmware on motherboard memory) and results in arbitrary code execution with high impact on confidentia...

CVE-2022-32493

Dell BIOS contains an Stack-Based Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

CVE-2022-32491

Dell Client BIOS contains a Buffer Overflow vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by manipulating an SMI to cause an arbitrary write during SMM...

CVE-2022-32491

Dell Client BIOS contains a buffer overflow vulnerability that can be triggered by a locally authenticated user manipulating an SMI to cause an arbitrary write in SMRAM during SMM. Affected: Dell Client BIOS. Root cause: buffer overflow in BIOS. Impact: high confidentiality, integrity, and availa...

CVE-2022-32489

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-32489

CVE-2022-32489 affects Dell BIOS. The vulnerability arises from improper input validation, enabling a local authenticated attacker to use an SMI to execute arbitrary code in SMRAM. Impact is high (confidentiality, integrity, and availability) per multiple sources. Exploitation requires access to ...

CVE-2022-32489

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-32488

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-32488

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user may potentially exploit this vulnerability by using an SMI to gain arbitrary code execution in SMRAM...

CVE-2022-32488

Dell BIOS contains an improper input validation vulnerability (CVE-2022-32488). A local authenticated attacker could use an SMI to gain arbitrary code execution in SMRAM, with high impact on confidentiality/integrity/availability. Affected component is the BIOS firmware on Dell systems; exploitat...