Description (CNA)
Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the product is running.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Yokogawa Rental & Lease Corporation / Passage Drive | affected Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 |
CWE
No CWE identifiers supplied.
References
- https://www.yrl.com/fwp_support/info/a1hrbt0000002037.html
- https://jvn.jp/en/jp/JVN23766146/index.html
ADP enrichment
No English description supplied.