by Kastro
Paper/Archive/CVE-2010-5326

CVE-2010-5326

SAP NetWeaver — SAP NetWeaver Remote Code Execution Vulnerability

KEV · due 3 MayEPSS 18%public exploitSSVC actCVSS 10.0
critical.is priorityof 100
99
CVSS 10.0 (ADP)10.0 / 10 × 3030.0In CISA KEV+3030.0EPSS percentile 97.2.972 × 2019.4Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

The Invoker Servlet on SAP NetWeaver Application Server Java platforms, possibly before 7.3, does not require authentication, which allows remote attackers to execute arbitrary code via an HTTP or HTTPS request, as exploited in the wild in 2013 through 2016, aka a "Detour" attack.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refsecurityfocus.com/bid/90533refonapsis.com/threat-report-tip-iceberg-wild-exploitation-cyber-attacks-sap-business-applicationsrefservice.sap.com/sap/support/notes/1445998refonapsis.com/research/publications/sap-security-in-depth-vol4-the-invoker-servlet-a-dangerous-detour-into-sap-java-solutionswriteupus-cert.gov/ncas/alerts/TA16-132Arefsecurityfocus.com/bid/48925refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2010-5326kevcisa.gov/known-exploited-vulnerabilities-catalog