CVE-2025-64701
Unknown Unknown - Not Provided
BaseFortify

Publication date: 2025-12-11

Last updated on: 2025-12-11

Assigner: JPCERT/CC

Description
QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a Windows system with the affected product to gain administrator privileges. As a result, sensitive information may be accessed or altered, and arbitrary actions may be performed.
CVSS Scores
EPSS Scores
Probability:
Percentile:
Meta Information
Published
2025-12-11
Last Modified
2025-12-11
Generated
2026-06-16
AI Q&A
2025-12-11
EPSS Evaluated
2026-06-15
NVD
CVE-2025-64701
EUVD
EUVD-2025-202666
Affected Vendors & Products
Showing 3 associated CPEs
Vendor Product Version / Range
qnd standard 11.0.9i
qnd premium 11.0.9i
qnd advance 11.0.9i
Helpful Resources
Exploitability
CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-268 Two distinct privileges, roles, capabilities, or rights can be combined in a way that allows an entity to perform unsafe actions that would not be allowed without that combination.
Attack-Flow Graph
AI Quick Actions
Instant insights powered by AI
Executive Summary

This vulnerability is a privilege escalation issue in QND Premium/Advance/Standard Ver.11.0.9i and earlier versions. It allows a user who can log in to a Windows system with the affected product to gain administrator privileges, which they normally should not have.

Impact Analysis

If exploited, this vulnerability can allow an attacker to access or alter sensitive information and perform arbitrary actions on the affected system with administrator privileges.

Compliance Impact

This vulnerability allows unauthorized privilege escalation, potentially leading to unauthorized access and modification of sensitive information. Such unauthorized access and data alteration could result in non-compliance with data protection regulations like GDPR and HIPAA, which require strict controls over access to sensitive data. Therefore, if exploited, this vulnerability may negatively impact compliance with these standards by compromising data confidentiality and integrity. [1, 2]

Mitigation Strategies

To mitigate this vulnerability, you should update the QND software to version 11.0.9i or later and apply the patch provided by QualitySoft Corporation through their product users' dedicated portal. Applying this fix will secure your system against the privilege escalation vulnerability. [1, 2]

Mitigation Strategies

To mitigate the CVE-2025-64701 vulnerability, you should update the QND Premium/Advance/Standard software to version 11.0.9i or later and apply the patch provided by QualitySoft Corporation. The patch is available through the product users' dedicated portal, which requires login credentials. Applying this fix will help secure your system against privilege escalation attacks. [1, 2]

Chat Assistant
Ask questions about this CVE
Hi! I’m here to help you understand CVE-2025-64701. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70
EPSS Chart