CVE-2012-2611

Exploit

EPSS 77.66%
Veröffentlicht 15.05.2012 04:21:43
Zuletzt bearbeitet 11.04.2025 00:51:21
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a crafted SAP Diag packet.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

SAP ≫ Netweaver Version7.0 Updateehp1

SAP ≫ Netweaver Version7.0 Updateehp2

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	77.66%	0.989

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://scn.sap.com/docs/DOC-8218

http://www.coresecurity.com/content/sap-netweaver-dispatcher-multiple-vulnerabilities

Exploit

http://www.securitytracker.com/id?1027052

https://service.sap.com/sap/support/notes/1687910

https://nvd.nist.gov/vuln/detail/CVE-2012-2611

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2012-2611

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2012-2611

EUVD