High severity8.1NVD Advisory· Published Nov 25, 2022· Updated Jun 17, 2026

CVE-2022-41157

Description

A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands.

Affected products

Webcash/Serp Server 2.0
cpe:2.3:a:webcash:serp_server_2.0:*:*:*:*:*:*:*:*
Range: <20.2.161
Kyungrinara/sERPllm-fuzzy
Webcash Co.,Ltd/sERP Server 2.0v5
Range: unspecified

Patches

Vulnerability mechanics

References

www.krcert.or.kr/krcert/secNoticeView.donvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000