CVE-2013-1592: Buffer Overflow

Published Jan 23, 2020
·
Updated

A Buffer Overflow vulnerability exists in the Message Server service MsJ2EEAddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code.

Affected Software

4 affected components
SAP NetWeaver=7.01-sr1
SAP NetWeaver=7.02-sp06
SAP NetWeaver=7.30-sp04
SAP NetWeaver=2004s

Event History

Jan 23, 2020
CVE Published
via MITRE·06:58 PM
Data Sourced
via MITRE·06:58 PM
Description
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

Frequently Asked Questions

1

What is CVE-2013-1592?

CVE-2013-1592 is a Buffer Overflow vulnerability that exists in the Message Server service _MsJ2EE_AddStatistics() function in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04.

2

How does CVE-2013-1592 affect SAP NetWeaver?

CVE-2013-1592 affects SAP NetWeaver versions 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04.

3

What is the severity of CVE-2013-1592?

CVE-2013-1592 has a severity rating of 9.8 (Critical).

4

How can a remote user exploit the CVE-2013-1592 vulnerability?

A remote malicious user can exploit the CVE-2013-1592 vulnerability by sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN.

5

Are there any references available for CVE-2013-1592?

Yes, you can find references for CVE-2013-1592 at the following links: [link1], [link2], [link3].

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203