CVE-2023-4537

Published: Feb 15, 2024Modified: Jun 17, 2026

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: cvd@cert.pl (Secondary)

Description

Comarch ERP XL client is vulnerable to MS SQL protocol downgrade request from a server side, what could lead to an unencrypted communication vulnerable to data interception and modification. This issue affects ERP XL: from 2020.2.2 through 2023.2.

Affected (1)

Products: Comarch: Erp Xl

Comarch

1 product

Erp Xl

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Comarch Erp Xl	From 2020.2.2 to 2023.2

Related CWEs

CWE-755

Improper Handling of Exceptional Conditions

The product does not handle or incorrectly handles an exceptional condition.

References (4)

https://cert.pl/en/posts/2024/02/CVE-2023-4537/

Source: cvd@cert.pl

Third Party Advisory

https://cert.pl/posts/2024/02/CVE-2023-4537/

Source: cvd@cert.pl

Third Party Advisory

https://cert.pl/en/posts/2024/02/CVE-2023-4537/

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://cert.pl/posts/2023/02/CVE-2023-4537/

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

Timeline

No history available yet.