CVSS VectorNVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Lifecycle Timeline
3DescriptionNVD
Infor SyteLine ERP uses hard-coded static cryptographic keys to encrypt stored credentials, including user passwords, database connection strings, and API keys. The encryption keys are identical across all installations. An attacker with access to the application binary and database can decrypt all stored credentials.
AnalysisAI
Syteline Erp versions up to 10.0.8803.16889 is affected by use of hard-coded cryptographic key (CVSS 7.1).
Sign in for full analysis, threat intelligence, and remediation guidance.
RemediationAI
Within 24 hours: Identify all systems running Syteline ERP versions up to 10.0.8803.16889 and isolate them from untrusted networks. Within 7 days: Implement network segmentation to restrict access to Syteline instances to authorized personnel only, deploy WAF rules to monitor for exploitation attempts, and contact Syteline for patch availability and timeline. …
Sign in for detailed remediation steps.
Share
External POC / Exploit Code
Leaving vuln.today