Published: 05/10/2016 Updated: 28/11/2016

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

CVSS v3 Base Score: 9.1 | Impact Score: 6 | Exploitability Score: 2.3

VMScore: 801

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

The (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG functions in the SCTC subpackage in SAP Netweaver 7.40 SP 12 allow remote authenticated users with certain permissions to execute arbitrary commands via vectors involving a CALL 'SYSTEM' statement, aka SAP Security Note 2260344.

Vulnerable Product	Search on Vulmon	Subscribe to Product
sap netweaver 7.40

The SAP Netweaver version 740 SP 12 SCTC_REFRESH_EXPORT_TAB_COMP function does not correctly sanitize variables used when executing CALL 'SYSTEM' statement, allowing an attacker, with particular privileges, to execute any arbitrary OS command ...

The SAP Netweaver version 740 SP 12 SCTC_REFRESH_CHECK_ENV function does not correctly sanitize variables used when executing CALL 'SYSTEM' statement, allowing an attacker, with particular privileges, to execute any arbitrary OS command ...

The SAP Netweaver version 740 SP 12 SCTC_TMS_MAINTAIN_ALOG function does not correctly sanitize variables used when executing CALL 'SYSTEM' statement, allowing an attacker, with particular privileges, to execute any arbitrary OS command ...

CWE-264 https://www.onapsis.com/research/security-advisories/sap-os-command-injection-sctcrefreshcheckenv http://seclists.org/fulldisclosure/2016/Oct/1 http://seclists.org/fulldisclosure/2016/Oct/0 http://seclists.org/fulldisclosure/2016/Oct/2 https://www.onapsis.com/blog/analyzing-sap-security-notes-march-2016 https://www.onapsis.com/research/security-advisories/sap-os-command-injection-sctctmsmaintainalog https://www.onapsis.com/research/security-advisories/sap-os-command-injection-sctcrefreshexporttabcomp http://www.securityfocus.com/bid/93272 https://nvd.nist.gov https://packetstormsecurity.com/files/138950/SAP-Netweaver-7.40-SP-12-SCTC_REFRESH_EXPORT_TAB_COMP-Command-Injection.html

CVE-2016-7435

Vulnerability Summary

Vulnerability Trend

Exploits

References

Vulmon Search

About

Products

Connect