CVE-2016-6137
CriticalSummary
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors.
Risk Assessment
Attackers may exploit this vulnerability to gain control over the operating system, potentially leading to serious security breaches within the organization.
Recommendation
It is recommended to update to the latest version of SAP TREX and monitor systems for unauthorized activities.
Other vulnerabilities in SAP TREX 7.10 Revision 63
See all- CVE-2016-6147Critical
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors.
- CVE-2016-6140Critical
SAP TREX version 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, posing a serious security threat.
- CVE-2016-6139Critical
SAP TREX version 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, posing a serious security risk.
- CVE-2016-6138Critical
Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors.
Original NVD description (English source)
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 2203591.