What’s Vulnerable › Vulnerabilities

CVE-2022-34866

• Severity: high (CVSS 7.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-07-20 · updated 2026-06-17
• Weakness: CWE-20

Description

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the product is running.

Affected products

• Yrl Passage Drive: from 1.4.0 through 1.5.1.0
• Yrl Passage Drive For Box: 1.0.0

References

• https://jvn.jp/en/jp/JVN23766146/index.html
• https://www.yrl.com/fwp_support/info/a1hrbt0000002037.html
• https://jvn.jp/en/jp/JVN23766146/index.html
• https://www.yrl.com/fwp_support/info/a1hrbt0000002037.html

Get alerted when CVE-2022-34866 or the next vulnerability affects your stack