Skip to content
OpenAdvisories
Unscored CVE-2022-34866 EUVD-2022-37772GHSA-vwqm-2h3p-mfwj

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability …

Published Jul 20, 2022 · Updated Aug 3, 2024 · Assigned by jpcert

Vendor: Yokogawa Rental & Lease Product: Passage Drive Category: ICS / OT

Description

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the product is running.

Affected products

VendorProductAffectedFixed
Yokogawa Rental & Lease Passage Drive Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 —

References