Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0 contain an insufficient data verification vulnerability for interprocess communication. By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the product is running.
[
{
"product": "Passage Drive",
"vendor": "Yokogawa Rental & Lease Corporation",
"versions": [
{
"status": "affected",
"version": "Passage Drive versions v1.4.0 to v1.5.1.0 and Passage Drive for Box version v1.0.0"
}
]
}
]