CVE-2016-6137

An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 2203591.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2016-09-27

Last modified

2024-08-06

Affected products

• Trex (Sap)

References

• http://onapsis.com/research/security-advisories/sap-trex-remote-command-execution
• http://packetstormsecurity.com/files/138436/SAP-TREX-7.10-Revision-63-Remote-Command-Execution.html
• http://seclists.org/fulldisclosure/2016/Aug/113
• http://seclists.org/fulldisclosure/2016/Aug/85