Design/Logic Flaw

2016-08-0514:59:00

PRIOn knowledge base

www.prio-n.com

7.4 High

AI Score

Confidence

Low

0.014 Low

EPSS

Percentile

86.5%

SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591.

CPENameOperatorVersion
trexeq7.10 revision-63

CPE	Name	Operator	Version
	trex	eq	7.10 revision-63

References

packetstormsecurity.com/files/138439/SAP-TREX-7.10-Revision-63-Arbitrary-File-Write.html

seclists.org/fulldisclosure/2016/Aug/88

www.securityfocus.com/bid/92069

www.onapsis.com/blog/analyzing-sap-security-notes-october-2015

www.onapsis.com/research/security-advisories/sap-trex-arbitrary-file-write