CVE-2022-34866

Description

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the product is running.

References

https://www.yrl.com/fwp_support/info/a1hrbt0000002037.html

https://jvn.jp/en/jp/JVN23766146/index.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3