A vulnerability in Industrial Application Software IAS Canias ERP 8.03 affects the doAction function of the RMI Interface component. The flaw involves improper authentication due to manipulation of the sessionId argument, allowing remote attackers to exploit it. Public exploit code exists, but the vendor has not responded or issued a fix. The CVSS score is 5.3, indicating medium severity.