CVE-2022-41157: Webcash Serp Server 2.0

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A specific file on the sERP server if Kyungrinara(ERP solution) has a fixed password with the SYSTEM authority. This vulnerability could allow attackers to leak or steal sensitive information or execute malicious commands.

Affected products

• Webcash Serp Server 2.0: before 20.2.161 (fixed in 20.2.161)

Published 2022-11-25. Last modified 2026-06-17.