TVN ID	TVN-202501007
CVE ID	CVE-2025-0586
CVSS	7.2 (High) CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products	a+HRD version 7.5 and earlier
Description	The a+HRD from aEnrich Technology has an Insecure Deserialization vulnerability, allowing remote attackers with database modification privileges and regular system privileges to perform arbitrary code execution.
Solution	Please refer to the aEnrich advisory to upgrade to version 6.8 or later and install the latest patches, or contact aEnrich customer service for assistance.
Credit	Cyku Hong(DEVCORE)
Public Date	2025-01-20