CVE-2016-6140 SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591.
CriticalCVSS 9.8
EPSS 5.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap trex | = 7.10-revision_63 | No fix listed |
References
- packetstormsecurity.com
- 20160819 Onapsis Security Advisory ONAPSIS-2016-022: SAP TREX Arbitrary file write mailing-list
- 92069 third-party-advisory vdb-entry
- www.onapsis.com third-party-advisory
- www.onapsis.com permissions-required