CVE-2023-2827

CVE-2023-2827 concerns SAP Plant Connectivity (PCo) v15.5 and Production Connector for SAP Digital Manufacturing v1.0, where the JSON Web Token (JWT) in HTTP requests is not validated. Root cause: lack of JWT signature validation enabling unauthorized callers from the internal network to issue se...

CVE-2017-16690

CVE-2017-16690 describes a DLL preloading vulnerability in SAP Plant Connectivity (NwSapSetup/SAPSetup) where DLLs (e.g., DWMAPI.dll) may be loaded from the executable’s folder rather than system folders. Root cause: the loader uses the local folder before system directories, enabling code execut...

CVE-2015-8330

CVE-2015-8330 affects SAP Plant Connectivity (PCo) agent versions 2.2, 2.3, 15.0 and 15.1. A remote attacker can trigger memory corruption and crash the PCo agent by sending crafted xMII requests, causing denial of service. This is documented by NVD (base score 7.8) and referenced advisories, inc...