CVE-2017-15293 Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 252...
CriticalCVSS 9.8
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sap point of sale xpress server | = 1020 | No fix listed |
| sap point of sale xpress server | = 1030 | No fix listed |
References
- 100713 third-party-advisory vdb-entry
- blogs.sap.com issue-tracking vendor-advisory
- erpscan.io
- erpscan.io