CVE-2016-6137: Critical severity sap trex vulnerability
Published Sep 27, 2016
·Updated
An unspecified function in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands via unknown vectors, aka SAP Security Note 2203591.
Affected Software
1 affected component
SAP TREX=7.10-revision_63
Event History
Sep 27, 2016
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6137?
CVE-2016-6137 is considered a high-severity vulnerability due to the potential for remote command execution.
2
How do I fix CVE-2016-6137?
To remediate CVE-2016-6137, upgrade SAP TREX to a version that is not affected by this vulnerability, specifically beyond Revision 63.
3
What types of attacks can exploit CVE-2016-6137?
CVE-2016-6137 can be exploited by attackers to execute arbitrary operating system commands on the affected SAP TREX system.
4
Who is affected by CVE-2016-6137?
Any organization using SAP TREX version 7.10 Revision 63 may be affected by CVE-2016-6137.
5
When was CVE-2016-6137 disclosed?
CVE-2016-6137 was disclosed in August 2016.