Critical severity9.8NVD Advisory· Published Jan 23, 2020· Updated Jun 16, 2026
CVE-2013-1592
CVE-2013-1592
Description
A Buffer Overflow vulnerability exists in the Message Server service _MsJ2EE_AddStatistics() function when sending specially crafted SAP Message Server packets to remote TCP ports 36NN and/or 39NN in SAP NetWeaver 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04, which could let a remote malicious user execute arbitrary code.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
6cpe:2.3:a:sap:netweaver:2004s:*:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:sap:netweaver:2004s:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver:7.01:sr1:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver:7.02:sp06:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver:7.30:sp04:*:*:*:*:*:*
- (no CPE)range: 2004s, 7.01 SR1, 7.02 SP06, and 7.30 SP04
- SAP/NetWeaverdescription
Patches
Vulnerability mechanics
References
6- www.coresecurity.com/content/SAP-netweaver-msg-srv-multiple-vulnerabilitiesnvdExploitThird Party Advisory
- www.exploit-db.com/exploits/24511nvdExploitThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/57956nvdThird Party AdvisoryVDB Entry
- www.securitytracker.com/id/1028148nvdThird Party AdvisoryVDB Entry
- exchange.xforce.ibmcloud.com/vulnerabilities/82064nvdThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/cve/CVE-2013-1592nvdThird Party AdvisoryVDB Entry
News mentions
0No linked articles in our index yet.