QND Privilege Escalation Vulnerability Allowing Unauthorized Administrative Access

A privilege escalation vulnerability has been identified in QND Premium, Advance, and Standard versions through 11.0.9i. This vulnerability allows a user logged into a Windows system with the affected QND product to gain administrator privileges. Consequently, this could lead to unauthorized access to, or modification of, sensitive information, as well as the ability to perform arbitrary actions on the system.

Impact

Exploitation of this vulnerability could result in unauthorized users gaining administrative rights on the affected Windows PC, potentially leading to unauthorized access to or alteration of sensitive information and the execution of arbitrary actions.

Remediation

Users are advised to update to QND version 11.0.9i and apply the available patch. Instructions for downloading the patch can be found on the QND Windows Client Vulnerability page on the QualitySoft website.