Improper Access Control Vulnerability In Prodys Quantum Audio Codec

5/23/2025

CVSS Score: 9.8

Description: Improper access control vulnerability in Prodys’ Quantum Audio codec affecting versions 2.3.4t and below. This vulnerability could allow an unauthenticated user to bypass authentication entirely and execute arbitrary API requests against the web application.

Vendors: Prodys

Affected product: Quantum Audio codec v2.3.4t

Solution: The vendor attempted to fix the vulnerability in version 2.3.4t, limiting exploitation to a low-privileged attacker only. Finally, the vulnerability was fully fixed by the manufacturer in version 2.3.4w.

Credits: Milan Duric, Jakob Pfister, INCIBE