CVE-2013-6820: Critical severity SAP NetWeaver Development Infrastructure vulnerability
Published Nov 19, 2013
·Updated
Unrestricted file upload vulnerability in the SAP NetWeaver Development Infrastructure (NWDI) allows remote attackers to execute arbitrary code by uploading a file with an executable extension via unspecified vectors.
Affected Software
1 affected component
SAP NetWeaver Development Infrastructure
Event History
Nov 19, 2013
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Nov 20, 2013
Data Sourced
via NVD·02:12 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2013-6820?
CVE-2013-6820 is classified as a critical vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2013-6820?
To remediate CVE-2013-6820, ensure that file upload validations are properly implemented to restrict executable file uploads.
3
What systems are affected by CVE-2013-6820?
CVE-2013-6820 affects the SAP NetWeaver Development Infrastructure.
4
Can CVE-2013-6820 be exploited remotely?
Yes, CVE-2013-6820 can be exploited remotely by attackers taking advantage of unrestricted file uploads.
5
What are the consequences of CVE-2013-6820 exploitation?
Exploiting CVE-2013-6820 may allow an attacker to execute arbitrary code on the vulnerable server.