Skip to content
OpenAdvisories
High · 8.1 CVE-2022-41157 EUVD-2022-44398GHSA-65h8-8v7v-fpc7

ERP solution Remote Code Execution Vulnerability

Published Nov 25, 2022 · Updated Apr 24, 2025 · Assigned by krcert

Description

A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands.

Affected products

VendorProductAffectedFixed
Webcash sERP Server 2.0 unspecified – ≤ 20.2.161 —

References