CVE-2002-1577: High severity sap sap r 3 vulnerability
Published Mar 16, 2004
·Updated
SAP R/3 2.0B to 4.6D installs several clients with default users and passwords, which allows remote attackers to gain privileges via the (1) SAP, (2) SAPCPIC, (3) DDIC, (4) EARLYWATCH, or (5) TMSADM accounts.
Affected Software
1 affected component
SAP Sap R 3=2.0b_to_4.6d
Event History
Mar 16, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2002-1577?
CVE-2002-1577 is considered a high severity vulnerability due to the potential for unauthorized remote access to SAP systems.
2
How do I fix CVE-2002-1577?
To fix CVE-2002-1577, it is recommended to remove or change the default passwords for the affected SAP accounts.
3
What systems are affected by CVE-2002-1577?
CVE-2002-1577 affects SAP R/3 versions 2.0B to 4.6D.
4
What accounts are exploited in CVE-2002-1577?
CVE-2002-1577 allows exploitation of default user accounts such as SAP*, SAPCPIC, DDIC, EARLYWATCH, and TMSADM.
5
Can CVE-2002-1577 lead to privilege escalation?
Yes, CVE-2002-1577 can lead to privilege escalation for attackers who gain access through the default accounts.