CVE:CVE-2018-0624
CNNVD:CNNVD-201809-419
Yayoi Kaikei 17 Series等都是日本Yayoi公司的产品。Yayoi Kaikei 17 Series是一套会计系统。Yayoi Aoiro Shinkoku 17是一套财务管理系统。
多款Yayoi 17系列产品中对ykkapi.dll的处理存在安全漏洞。攻击者可借助恶意的DLL利用该漏洞获取权限。以下产品和版本受到影响：Yayoi Kaikei 17 Series 23.1.1及之前版本；Yayoi Aoiro Shinkoku 17 23.1.1及之前版本；Yayoi Kyuuyo 17 20.1.4及之前版本；；Yayoi Kyuuyo Keisan 17 20.1.4及之前版本；Yayoi Hanbai 17 Series 20.0.2及之前版本；Yayoi Kokyaku Kanri 17 11.0.2及之前版本。
solution:Upgrade yayoi-kk aoiro_shinkoku to a higher version than 23.1.1,and avoid the version (,23.1.1]; Upgrade yayoi-kk hanbai to a higher version than 20.0.2,and avoid the version (,20.0.2]; Upgrade yayoi-kk kaikei to a higher version than 23.1.1,and avoid the version (,23.1.1]; Upgrade yayoi-kk kokyaku_kanri to a higher version than 11.0.2,and avoid the version (,11.0.2]; Upgrade yayoi-kk kyuuyo to a higher version than 20.1.4,and avoid the version (,20.1.4]; Upgrade yayoi-kk kyuuyo_keisan to a higher version than 20.1.4,and avoid the version (,20.1.4]