Vulnerability Description
The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the system user.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Westerndigital | Sandisk Professional G-Raid 4\/8 Software Utility | < 300520006-2 |
| Westerndigital | Sandisk Professional G-Raid 4\/8 Software Utility Driver | < 6.2.0.16-2 |
Related Weaknesses (CWE)
References
- https://www.westerndigital.com/support/product-security/wdc-22007-sandisk-profesVendor Advisory
- https://www.westerndigital.com/support/product-security/wdc-22007-sandisk-profesVendor Advisory
FAQ
What is CVE-2022-22996?
CVE-2022-22996 is a vulnerability with a CVSS score of 7.8 (HIGH). The G-RAID 4/8 Software Utility setups for Windows were affected by a DLL hijacking vulnerability. Successful exploitation could lead to arbitrary code execution in the context of the system user.
How severe is CVE-2022-22996?
CVE-2022-22996 has been rated HIGH with a CVSS base score of 7.8/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-22996?
Check the references section above for vendor advisories and patch information. Affected products include: Westerndigital Sandisk Professional G-Raid 4\/8 Software Utility, Westerndigital Sandisk Professional G-Raid 4\/8 Software Utility Driver.