CVE-2022-41157 — ERP solution Remote Code Execution Vulnerability

CVE-2022-41157

ERP solution Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands.

Affected (CNA)

Vendor / product	Versions
Webcash Co.,Ltd / sERP Server 2.0	affected unspecified through 20.2.161

CWE

CWE-798

References

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=67042

ADP enrichment

CVE

No English description supplied.

https://www.krcert.or.kr/krcert/secNoticeView.do?bulletin_writing_sequence=67042

CISA-ADP

No English description supplied.

No references supplied.