RATOC RAID Monitoring Manager for Windows Uncontrolled Search Path Vulnerability Allowing Arbitrary Code Execution
Vulnerability
A vulnerability exists in the installer of RATOC RAID Monitoring Manager for Windows, prior to version 2.00.009.260220. The issue arises from an uncontrolled search path element, allowing the installer to load certain DLLs from the current directory. If a user is instructed to place a crafted DLL in the same directory as the installer, it could lead to arbitrary code execution with administrator privileges.
Impact
Exploitation of this vulnerability allows for arbitrary code execution with administrator privileges.
Remediation
Users should update RATOC RAID Monitoring Manager for Windows to the latest version. Instructions for downloading the latest version are available on the RATOC Systems website.
Vulnerability Rating
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.