Dell Geodrive vulnerabilities

6 CVEs affecting Dell Geodrive, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-33937, published 2022-10-12.

More from Dell.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2022-33920, published 2022-10-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell GeoDrive, versions prior to 2.2, contains an Unquoted File Path vulnerability. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code…
• CVE-2022-33919, published 2022-10-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell GeoDrive, versions 2.1 - 2.2, contains an information disclosure vulnerability in GUI. An authenticated non-admin user could potentially exploit this vulnerability and view sensitive information.
• CVE-2022-33937, published 2022-10-12. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. Dell GeoDrive, Versions 1.0 - 2.2, contain a Path Traversal Vulnerability in the reporting function. A local, low privileged attacker could potentially exploit this vulnerability, to gain…
• CVE-2022-33921, published 2022-10-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell GeoDrive, versions prior to 2.2, contains Multiple DLL Hijacking Vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary…
• CVE-2022-33922, published 2022-10-12. High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days. Dell GeoDrive, versions prior to 2.2, contains Insecure File and Folder Permissions vulnerabilities. A low privilege attacker could potentially exploit this vulnerability, leading to the execution of…
• CVE-2022-33918, published 2022-10-12. Medium severity, CVSS 5.5. EPSS: 0.1% chance of exploitation in the next 30 days. Dell GeoDrive, Versions 2.1 - 2.2, contains an information disclosure vulnerability. An authenticated non-admin user could potentially exploit this vulnerability and gain access to sensitive…