CVE-2016-6147
CriticalSummary
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors.
Risk Assessment
Attackers may gain full access to the operating system, potentially leading to serious security breaches and data loss.
Recommendation
It is recommended to update to the latest version of SAP TREX and implement appropriate security measures to minimize the risk of attack.
Other vulnerabilities in SAP TREX 7.10 Revision 63
See all- CVE-2016-6137Critical
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors.
- CVE-2016-6140Critical
SAP TREX version 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, posing a serious security threat.
- CVE-2016-6139Critical
SAP TREX version 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors, posing a serious security risk.
- CVE-2016-6138Critical
Directory traversal vulnerability in SAP TREX 7.10 Revision 63 allows remote attackers to read arbitrary files via unspecified vectors.
Original NVD description (English source)
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors, aka SAP Security Note 2234226.