CVE-2023-20852: aEnrich a+HRD - Deserialization of Untrusted Data
Published Apr 27, 2023
·Updated
aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ interpreter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service.
Affected Software
1 affected component
aEnrich A\+hrd=6.8.1039v844
Remediation
Information
Update a+HRD version to eHRD6.8.1039V920 and later
Event History
Apr 27, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is the vulnerability ID of this issue?
The vulnerability ID is CVE-2023-20852.
2
What is the severity of CVE-2023-20852?
The severity of CVE-2023-20852 is critical with a score of 9.8.
3
What is the affected software version of CVE-2023-20852?
The affected software version of CVE-2023-20852 is Aenrich A+HRD 6.8.1039v844.
4
How can an attacker exploit CVE-2023-20852?
An unauthenticated remote attacker can exploit CVE-2023-20852 to execute arbitrary system commands to perform arbitrary system operations or disrupt service.
5
Is there any additional reference for CVE-2023-20852?
Yes, you can find more information about CVE-2023-20852 at https://www.twcert.org.tw/tw/cp-132-7023-8368b-1.html.