Skip to content
OpenAdvisories
High · 7.8 CVE-2022-22996 EUVD-2022-28107GHSA-2xm9-wrwq-gvjf

SanDisk Professional G-RAID 4/8 Software Utility, Privilege Escalation

Published Mar 30, 2022 · Updated Aug 3, 2024 · Assigned by WDC PSIRT

Description

The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the system user.

Affected products

VendorProductAffectedFixed
SanDisk Professional G-RAID 4/8 Software Utility G-RAID 4/8 Software Utility – < 300520006-2, G-RAID Windows Driver – < V6.2.0,16-2 300520006-2

References