This vulnerability affects the iasGetServerInfoEvent function within the RMI Interface component of Industrial Application Software IAS Canias ERP 8.03. It allows an unauthenticated remote attacker to perform actions that bypass proper authorization controls, potentially leading to unauthorized access or manipulation. The vulnerability has been publicly disclosed, but the vendor has not provided any response or remediation guidance. The CVSS 4.0 base score is 6.9, indicating a medium severity level with network attack vector, no privileges required, no user interaction, and low impact on confidentiality.

The vulnerability enables remote attackers to bypass authorization controls in the affected ERP software, potentially allowing unauthorized access to server information or related functions. The impact is rated medium due to the lack of privilege requirements and the limited confidentiality impact. No known exploits in the wild have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no official patch or workaround is available, users should monitor for updates from the vendor and consider restricting network access to the affected service where possible to reduce exposure.