TVN ID	TVN-202111007
CVE ID	CVE-2021-43359
CVSS	8.8 (High) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected Products	Sunnet eHRD version 8 & 9
Description	Sunnet eHRD has broken access control vulnerability, which allows a remote attacker to access account management page after being authenticated as a general user, then perform privilege escalation to execute arbitrary code and control the system or interrupt services.
Solution	Update Sunnet eHRD version to 10
Credit	Cyku Hong(DEVCORE)
Public Date	2021-11-30