Lucene search
HistoryOct 12, 2022 - 8:15 p.m.
CVE-2022-33921
dell geodrive
dll hijacking
vulnerabilities
low privilege
arbitrary code
security context
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Dell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code in the SYSTEM security context.
Affected configurations
Node
dellgeodriveRange<2.2.3
References
Related
cnvd
cnvd
Dell GeoDrive DLL Hijacking Vulnerability
2022-10-14 00:00:00
cvelist
cvelist
CVE-2022-33921
2022-10-12 19:25:45
cve
cve
CVE-2022-33921
2022-10-12 20:15:10
prion
prion
Code injection
2022-10-12 20:15:00
CVSS3
7.8
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
EPSS
0
Percentile
12.6%
Related for NVD:CVE-2022-33921