CVE-2022-22547 | BDVDB-2026-171321 Detail

SAP SESimple Diagnostics Agent

Description#

Simple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access information which would otherwise be restricted via a random port 9000-65535. This allows information gathering which could be used exploit future open-source security exploits.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

References#

https://dam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10
https://launchpad.support.sap.com/#/notes/3147102
http://seclists.org/fulldisclosure/2022/Jun/40
http://packetstormsecurity.com/files/167562/SAP-FRUN-Simple-Diagnostics-Agent-1.0-Information-Disclosure.html

Exploit#

No public exploit known

History#

Version 12022-03-08Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.