CVE-2023-4537

Summary

Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification.

This issue affects ERP XL: from 2020.2.2 through 2023.2.

Affected Software

Weaknesses

• CWE-755: CWE-755 Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: total

CVE Program Container

Additional References

• https://cert.pl/en/posts/2024/02/CVE-2023-4537/
• https://cert.pl/posts/2023/02/CVE-2023-4537/

References

• https://cert.pl/en/posts/2024/02/CVE-2023-4537/
• https://cert.pl/posts/2024/02/CVE-2023-4537/

• ←Previous
• Next→