CVE-2016-6140
CriticalSummary
SAP TREX version 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, posing a serious security threat.
Risk Assessment
Attackers could exploit this vulnerability to modify or delete critical files, potentially leading to data loss or system disruption.
Recommendation
It is recommended to update to the latest version of SAP TREX and implement appropriate security measures to minimize the risk of attack.
Other vulnerabilities in SAP TREX 7.10 Revision 63
See all- CVE-2016-6137Critical
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors.
- CVE-2016-6147Critical
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors.
- CVE-2016-6139Critical
SAP TREX version 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, posing a serious security risk.
- CVE-2016-6138Critical
Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors.
Original NVD description (English source)
SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591.