CVE Catalog
CVE-2017-11459
CriticalSummary
SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command.
Risk Assessment
Attackers may gain access to sensitive data or remotely execute malicious code, posing a serious security threat to the system.
Recommendation
It is recommended to update to the latest version of SAP TREX and implement appropriate security measures to minimize the risk of attacks.
Original NVD description (English source)
SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592.