The vulnerability is located in an unspecified function of the JNLP Deployment Endpoint in IAS Canias ERP 8.03. An attacker can manipulate the endpoint to force the application to use a hard‑coded cryptographic key. This compromises the confidentiality and integrity guarantees normally provided by the system’s cryptographic operations.

The affected system is the IAS Canias ERP product, version 8.03, used in industrial settings. No other product or version information is recorded.

The CVSS score of 6.9 indicates a moderate risk, and the vulnerability can be triggered remotely. Because the cryptographic key is hard‑coded, intrusion can lead to decryption of sensitive data or forging of signatures, potentially allowing access to protected resources. No EPSS value is available and the vulnerability is not listed in the CISA KEV catalog, so the likelihood of exploitation is unknown but the impact remains significant if a compromise occurs.