CVE-2022-33921

Dell GeoDrive on Windows is affected by DLL hijacking in versions prior to 2.2 (CNVD notes 2.2.3). The root cause is an unsafe DLL search path that can be exploited by a local, low-privilege attacker to execute arbitrary code in the SYSTEM context. Affected component is the Dell GeoDrive DLL load...

CVE-2022-33937

Dell GeoDrive (versions 1.0–2.2) contains a Path Traversal vulnerability in the reporting function. A local, low-privileged attacker could exploit this flaw to delete files on the server’s filesystem with the GeoDrive service privilege (NT AUTHORITY\SYSTEM). Root cause: insufficient input/path va...

CVE-2022-33918

Dell GeoDrive vulnerability CVE-2022-33918 affects versions 2.1–2.2. Root cause is insufficient protection of sensitive data and unencrypted storage, enabling an authenticated non-admin user to disclose information via local access. Impact: confidentiality exposure (C:H, I:N, A:N) per CVE metrics...

CVE-2022-33922

CVE-2022-33922 affects Dell GeoDrive before version 2.2. The issue is insecure file and folder permissions that allow a low-privilege, local attacker to potentially execute arbitrary code in the SYSTEM context. Affected product/version: Dell GeoDrive prior to 2.2. Impact is defined as remote? No,...

CVE-2022-33920

CVE-2022-33920 affects Dell GeoDrive prior to v2.2. The issue is an Unquoted File Path vulnerability that can allow a low-privilege attacker to execute arbitrary code in the SYSTEM context. Affected component: Dell GeoDrive executable/installation path with unquoted spaces. Impact: potential full...

CVE-2022-33919

CVE-2022-33919 affects Dell GeoDrive GUI, versions 2.1–2.2. An authenticated non-admin user could disclose sensitive information due to an information-disclosure flaw in the GUI. The access is local (AV:L, PR:L) with no user interaction required, and the impact is confidentiality, integrity, and ...