CVE-2016-6147: OS Command Injection
Published Aug 5, 2016
·Updated
An unspecified interface in SAP TREX 7.10 Revision 63 allows remote attackers to execute arbitrary OS commands with SIDadm privileges via unspecified vectors, aka SAP Security Note 2234226.
Affected Software
1 affected component
SAP TREX=7.10-revision_63
Event History
Aug 5, 2016
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2016-6147?
CVE-2016-6147 is considered a high severity vulnerability due to its potential for remote code execution with elevated privileges.
2
How do I fix CVE-2016-6147?
To mitigate CVE-2016-6147, you should apply the security updates provided by SAP as referenced in SAP Security Note 2234226.
3
What software versions are affected by CVE-2016-6147?
CVE-2016-6147 affects SAP TREX version 7.10 Revision 63.
4
Can CVE-2016-6147 be exploited remotely?
Yes, CVE-2016-6147 can be exploited remotely by attackers to execute arbitrary OS commands.
5
What privileges are required to exploit CVE-2016-6147?
Exploitation of CVE-2016-6147 allows attackers to execute commands with SIDadm privileges.