CVE-2012-2611 The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configu...

HighCVSS 9.3 EPSS 44.3% Framework module Public exploit PoC

Published: 2012-05-15 04:00
Updated: 2026-06-17 02:41
Exploit status: Public exploit available

Description

The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a crafted SAP Diag packet.

Affected products

Product	Affected versions	Fixed in
sap netweaver	= 7.0-ehp1	No fix listed
sap netweaver	= 7.0-ehp2	No fix listed

References

CVSS v2.0

9.3 High

AV:N/AC:M/Au:N/C:C/I:C/A:C

Access Vector: Network
Access Complexity: Medium
Authentication: None
Confidentiality: Complete
Integrity: Complete
Availability: Complete

Weakness & likelihood

EPSS (exploitation probability, 30 days): 44.28% (percentile 98.8)
CWE: CWE-20

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

SAP NetWeaver Dispatcher DiagTraceR3Info Buffer Overflow Framework module · Metasploit Framework (Rapid7) · 2012-05-08
SAP NetWeaver Dispatcher - DiagTraceR3Info Buffer Overflow (Metasploit) Exploit · Exploit Database (OffSec) · 2012-09-07
SAP NetWeaver Dispatcher - Multiple Vulnerabilities PoC · Exploit Database (OffSec) · 2012-05-09
SAP NetWeaver Dispatcher 7.0 ehp1/2 - Multiple Vulnerabilities PoC · Exploit Database (OffSec) · 2012-08-21