Description
Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Path Traversal'). If exploited, arbitrary code may be executed by a remote unauthenticated attacker with the Windows system privilege where the product is running.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SIOS Technology | Quick Agent V3 | prior to Ver3.2.1 | — |
| SIOS Technology | Quick Agent V2 | prior to Ver2.9.8 | — |