CVE-2023-26759

HIGH

Sme.UP ERP TOKYO V6R1M220406 - Command Injection

Title source: llm
STIX 2.1

Description

Sme.UP ERP TOKYO V6R1M220406 was discovered to contain an OS command injection vulnerability via calls made to the XMService component.

References (1)

Core 1
Core References

Scores

CVSS v3 8.8
EPSS 0.0238
EPSS Percentile 81.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact total

Details

CWE
CWE-78
Status published
Products (1)
smeup/erp tokyo_v6r1m220406
Published Feb 27, 2023
Tracked Since Feb 18, 2026