CVE-2024-4996: critical vulnerability in Asseco Business Solutions S.A. Wapro ERP Desktop
Hardcoded Password in Wapro ERP Desktop
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 9.3epss 0.6%
Use of a hard-coded password for a database administrator account created during Wapro ERP installation allows an attacker to retrieve embedded sensitive data stored in the database. The password is same among all Wapro ERP installations. This issue affects Wapro ERP Desktop versions before 8.90.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/AU:Y/R:I/V:C/RE:M/U:Red
Affected products
Asseco Business Solutions S.A. · Wapro ERP DesktopRelated CVEs — Asseco Business Solutions S.A. Wapro ERP Desktop
In the same product, most dangerous first.