CVE-2016-6147
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 4.5%
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors, aka SAP Security Note 2234226.
Affected products
n/a · n/aReferences
http://packetstormsecurity.com/files/138446/SAP-TREX-7.10-Revision-63-Remote-Command-Execution.htmlhttp://seclists.org/fulldisclosure/2016/Aug/94https://www.onapsis.com/blog/analyzing-sap-security-notes-february-2016https://www.onapsis.com/research/security-advisories/sap-trex-remote-command-execution-0http://www.securityfocus.com/bid/92066