CVE-2011-1517 SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex() function. By sending a specially-crafted packet, an attacker could exploit this vulnerabil...
CriticalCVSS 9.8
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAP NetWeaver 7.0 allows Remote Code Execution and Denial of Service caused by an error in the DiagTraceHex() function. By sending a specially-crafted packet, an attacker could exploit this vulnerability to cause the application to crash.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap netweaver | = 7.0 | No fix listed |
References
- archives.neohapsis.com broken-link
- www.securityfocus.com third-party-advisory vdb-entry
- exchange.xforce.ibmcloud.com third-party-advisory vdb-entry