CVE-2022-34866 Information

Description

Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the product is running.

Reference

https://jvn.jp/en/jp/JVN23766146/index.html https://www.yrl.com/fwp_support/info/a1hrbt0000002037.html