Read the docs

Resort Data Processing, Inc.

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Resort Data Processing, Inc. records in CISA KEV

No Resort Data Processing, Inc. vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Internet Reservation Module Next Generation 5 records MEDIUM

Records

5 records in Internet Reservation Module Next Generation · all components

TI-2023-20563 CVE-2023-39424 · GHSA-28pf-jj6h-h694

Injection in Resort Data Processing, Inc. IRM Next Generation

Priority MEDIUM 45

A vulnerability in RDPngFileUpload.dll, as used in the IRM Next Generation booking system, allows a remote attacker to upload arbitrary content (such as a web shell component) to the SQL database and execute it with SYST…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00987 Published 2023-09-07 No fix listed CWE-74
TI-2023-20559 CVE-2023-39420 · GHSA-pw6p-wr56-q7jh

Use of Hard-coded Credentials in RDPCore.dll

Priority MEDIUM 44

The RDPCore.dll component as used in the IRM Next Generation booking engine, allows a remote user to connect to customers with an "admin" account and a corresponding password computed daily by a routine inside the DLL fi…

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00734 Published 2023-09-07 No fix listed CWE-798
TI-2023-20560 CVE-2023-39421 · GHSA-55q7-p8m7-cchj

Use of Hard-coded Credentials in RDPWin.dll

Priority LOW 34

The RDPWin.dll component as used in the IRM Next Generation booking engine includes a set of hardcoded API keys for third-party services such as Twilio and Vonage.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00474 Published 2023-09-07 No fix listed CWE-798
Open these records in search →