PT-2014-8636

Name of the Vulnerable Software and Affected Versions SAP Network Interface Router SAProuter version 40.4 Description The issue is related to an integer overflow that allows remote attackers to cause a denial of service by consuming resources via crafted requests. Recommendations For SAP Network...

SAP Router - Integer Overflow vulnerability

Application: SAP Network Interface Router SAProuter Versions Affected: SAP 40.4 – Win64/Linux x8664 Vendor URL: http://www.sap.com Vulnerability: XXE Reported: 16.06.2014 Vendor response: 17.06.2014 Date of Public Advisory: 17.10.2014 Reference: SAP Security Note 2037492 Authors: Roman Bazhin...

SAProuter Detection

The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifie...

SAProuter Remote Authentication Bypass Vulnerability

SAProuter is prone to an authentication-bypass vulnerability. Copyright C 2014 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software;...

SAProuter Remote Authentication Bypass (Note 1853140)

The remote host has a version of SAProuter that is affected by an authentication bypass vulnerability. When started with the '-X' flag, SAProuter permits routing to itself given a 'saprouttab' that allows access to its port. An unauthenticated, remote attacker can issue commands to SAProuter...

SAProuter Detection

Binary data saprouterdetect.nbin...

CVE-2013-7093

SAP Network Interface Router SAProuter 39.3 SP4 allows remote attackers to bypass authentication and modify the configuration via unspecified vectors...

Authentication flaw

SAP Network Interface Router SAProuter 39.3 SP4 allows remote attackers to bypass authentication and modify the configuration via unspecified vectors...

CVE-2013-7093

CVE-2013-7093 affects SAP Network Interface Router (SAProuter) 39.3 SP4. The vulnerability allows remote attackers to bypass authentication and modify the SAProuter configuration via unspecified vectors. This is noted as a network-based issue with attack complexity low and no authentication requi...

CVE-2013-7093

SAP Network Interface Router SAProuter 39.3 SP4 allows remote attackers to bypass authentication and modify the configuration via unspecified vectors...

CVE-2013-7093: Improper Authentication

SAP Network Interface Router SAProuter 39.3 SP4 allows remote attackers to bypass authentication and modify the configuration via unspecified vectors...

PT-2013-6269

Name of the Vulnerable Software and Affected Versions SAP Network Interface Router SAProuter version 39.3 SP4 Description The issue allows remote attackers to bypass authentication and modify the configuration. Recommendations For SAP Network Interface Router SAProuter version 39.3 SP4, at the...

Heap overflow

Heap-based buffer overflow in SAP Network Interface Router SAProuter 7.30 allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages...

CVE-2013-6817

CVE-2013-6817 affects SAP Network Interface Router (SAProuter) 7.30. It is a heap-based buffer overflow in NI Route message handling that can allow a remote attacker to cause a denial of service and execute arbitrary code. The available documents confirm the vulnerable component is SAProuter 7.30...

CVE-2013-6817

Heap-based buffer overflow in SAP Network Interface Router SAProuter 7.30 allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages...

PT-2013-6127

Name of the Vulnerable Software and Affected Versions SAP Network Interface Router SAProuter version 7.30 Description A heap-based buffer overflow issue allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages. Recommendations For SAP Network...

CVE-2013-6817: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in SAP Network Interface Router SAProuter 7.30 allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages...

SAPRouter Port Scanner

This module allows for mapping ACLs and identify open/closed ports accessible on hosts through a saprouter. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'SAPRouter Port Scanner', 'Description...

SAProuter - Authentication Bypass

Application: SAP Network Interface Router SAProuter Versions Affected: 39.3 SP4 7100.0.0.201 – Win64/Linux x8664, 40.4 Vendor URL: http://www.sap.com Bugs: Authentication bypass Exploits: NO Reported: 23.03.2013 Vendor response: 24.03.2013 Date of Public Advisory: 25.11.2013 Reference: SAP Securi...

SAPRouter Admin Request

Display the remote connection table from a SAPRouter. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspired by, or is a port of a plugin available in the Onapsis Bizploit Opensource ERP...