TVN ID	TVN-202302011
CVE ID	CVE-2023-20852
CVSS	9.8 (Critical) CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected Products	aEnrich a+HRD v6.8.1039V844
Description	aEnrich Technology a+HRD has a vulnerability of Deserialization of Untrusted Data within its MSMQ interpreter. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary system commands to perform arbitrary system operation or disrupt service.
Solution	Update a+HRD version to eHRD6.8.1039V920 and later
Credit	Tree (CHT Security)
Public Date	2023-03-31