Description
A vulnerability was determined in Industrial Application Software IAS Canias ERP 8.03. This affects an unknown function of the component JNLP Deployment Endpoint. Executing a manipulation can lead to use of hard-coded cryptographic key
. The attack may be performed from remote. The vendor was contacted early about this disclosure but did not respond in any way.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Industrial Application Software IAS | Canias ERP | 8.03 | — |
References
- VDB-362459 | Industrial Application Software IAS Canias ERP JNLP Deployment Endpoint hard-coded key vdb-entry
- VDB-362459 | CTI Indicators (IOB, IOC, TTP) signature permissions-required
- Submit #808296 | Industrial Application Software - IAS Canias ERP 8.03-- Use of Hard-coded Cryptographic Key (CWE-321) third-party-advisory
- https://hawktrace.com/blog/caniaserp related