Description
QND contains an improper access control vulnerability in a named pipe, which may allow a local attacker who is logged in to a Windows PC where the affected product's client is installed to execute arbitrary commands with SYSTEM privileges.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| QualitySoft | QND Premium | ≤ Ver.11.1i | — |
| QualitySoft | QND Standard | ≤ Ver.11.1i | — |
| QualitySoft | QND Advance | ≤ Ver.11.0.9i | — |