CVE-2023-20853: aEnrich a+HRD - Deserialization of Untrusted Data

Published Apr 27, 2023

Updated

aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ asynchronized message process. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service.

Affected Software

1 affected component

aEnrich A\+hrd=6.8.1039v844

Remediation

Information

Update a+HRD version to eHRD6.8.1039V920 and later

Event History

Apr 27, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID?

The vulnerability ID is CVE-2023-20853.

What is the title of the vulnerability?

The title of the vulnerability is 'aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ asynchronized message process.'

What is the severity of CVE-2023-20853?

The severity of CVE-2023-20853 is critical with a CVSS score of 9.8.

What software is affected by CVE-2023-20853?

The software affected by CVE-2023-20853 is aEnrich Technology a+HRD version 6.8.1039v844.

How can an attacker exploit CVE-2023-20853?

An unauthenticated remote attacker can exploit CVE-2023-20853 to execute arbitrary system commands and perform arbitrary system operation or disrupt service.