CVE-2011-1517 — SAP Netweaver vulnerability

4 documents4 sources
Severity
9.8CRITICALNVD
EPSS
2.4%
top 15.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
SAP Netweaver
Timeline
PublishedFeb 5
Latest updateApr 22

Description

SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex() function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages1 packages

â–¶NVDsap/netweaver7.0

🔴Vulnerability Details

2
GHSA
GHSA-2qp5-wv2r-fqw5: SAP NetWeaver 7↗2022-04-22
â–¶
CVEList
CVE-2011-1517: SAP NetWeaver 7↗2020-02-05
â–¶

💥Exploits & PoCs

1
Exploit-DB
SAP NetWeaver Dispatcher - Multiple Vulnerabilities↗2012-05-09
â–¶
CVE-2011-1517 — SAP Netweaver vulnerability | cvebase