Description
Wapro ERP Desktop is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects Wapro ERP Desktop versions before 9.00.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Asseco Business Solutions | Wapro ERP Desktop | < 9.00.0 | 9.00.0 |
References
- https://cert.pl/en/posts/2024/12/CVE-2024-4995/ third-party-advisory
- https://cert.pl/posts/2024/12/CVE-2024-4995/ third-party-advisory
- https://wapro.pl/ product