← back
CVE-2013-1592

CVE-2013-1592

EPSS 22.6%
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code.
Affected products
n/a · n/a
public PoCs found — 3
cve_referencewww.exploit-db.com/exploits/24511unverifiedexploitdbwww.exploit-db.com/exploits/24511unverifiedcve_referencepacketstormsecurity.com/files/cve/CVE-2013-1592unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://exchange.xforce.ibmcloud.com/vulnerabilities/82064https://packetstormsecurity.com/files/cve/CVE-2013-1592http://www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilitieshttp://www.exploit-db.com/exploits/24511http://www.securityfocus.com/bid/57956http://www.securitytracker.com/id/1028148