Description (CNA)
QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| QualitySoft Corporation / QND Premium | affected 0 through Ver.11.1i |
| QualitySoft Corporation / QND Standard | affected 0 through Ver.11.1i |
| QualitySoft Corporation / QND Advance | affected 0 through Ver.11.0.9i |
CWE
CWE-782
References
ADP enrichment
No English description supplied.
No references supplied.