VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Jul 25, 2017· Updated Jun 17, 2026

CVE-2017-11459

CVE-2017-11459

Description

SAP TREX 7.10 allows remote attackers to (1) read arbitrary files via an fget command or (2) write to arbitrary files and consequently execute arbitrary code via an fdir command, aka SAP Security Note 2419592.

Affected products

2
  • SAP/Trex2 versions
    cpe:2.3:a:sap:trex:7.10:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:trex:7.10:*:*:*:*:*:*:*
    • (no CPE)range: 7.10

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.