RULE(RULE ID:339168)

Rule General Information
Release Date: 2025-06-25
Rule Name: Yonyou NC printBill Arbitrary File Read Vulnerability
Severity:
CVE ID:
Rule Protection Details
Description: Yonyon NC is a high-end enterprise ERP software launched by Yonyon Company. It is designed for large enterprises and group enterprises, providing comprehensive core business management functions such as financial management, supply chain management, and human resource management, supporting enterprises' complex business scenarios and high concurrent data processing requirements. The printBill interface in Yonyou NC contains an arbitrary file read vulnerability. An unauthenticated remote attacker can exploit this vulnerability to read sensitive system files, which are automatically deleted during the reading process, leaving the system in a highly insecure state.
Impact: An attacker could exploit this vulnerability to have unspecified effect.
Affected OS: Windows, Linux, Others
Reference:
Solutions
Please contact the software vendor to update the software patch.