CVE-2024-4995CWE-757

Protocol Downgrade in Wapro ERP Desktop

Critical · published December 18, 2024

CVSS v4.0
9.1
EPSS
1%
Percentile
60.1
In the wild
Unconfirmed
What it is

🔥 Wapro ERP Desktop is vulnerable to a sneaky downgrade attack that could leave your sensitive data wide open! Think of it like a fancy restaurant switching from a private dining room to a noisy kitchen — your confidential conversations could be overheard and tampered with by anyone nearby. 🍽️ An attacker exploiting this vulnerability could intercept and modify unencrypted communication, which could lead to unauthorized access to critical data. This could result in devastating consequences for your business, including data breaches and financial losses! ⚡️

Put simply

Think of it like a fancy restaurant switching from a private dining room to a noisy kitchen — your confidential conversations could be overheard and tampered with by anyone nearby. 🍽️ This vulnerability allows for a downgrade request of the MS SQL protocol from the server side, which means that secure communication could fall back to an unprotected state, enabling potential attackers to snoop and meddle with the data being transmitted.

What to do

An attacker exploiting this vulnerability could intercept and modify unencrypted communication, which could lead to unauthorized access to critical data. This could result in devastating consequences for your business, including data breaches and financial losses! ⚡️ Immediately upgrade to Wapro ERP Desktop version 9.00.0 or later to patch this vulnerability. Additionally, review your network security practices to ensure all communications are encrypted and secure. Don't let your data be an open book! You've got this! Follow these steps and you can secure your system in no time! 🛡️

The record
Technical detail
CVSS v4.0
9.1 · CRITICAL
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/R:U/V:C/RE:M/U:Amber
EPSS
0.00924 · 60.1th percentile
Weakness
CWE-757 · Selection of Less-Secure Algorithm During Negotiation ('Algorithm Downgrade')
Published
2024-12-18T11:36Z
EPSS history
Timeline
  • 18 DEC 11:36Z
    Protocol Downgrade in Wapro ERP Desktop
    cvelistv5