CVE-2022-22547

Description

Simple Diagnostics Agent - versions 1.0 (up to version 1.57.), allows an attacker to access information which would otherwise be restricted via a random port 9000-65535. This allows information gathering which could be used exploit future open-source security exploits.

Weakness classification

• cna@sap.com: CWE-200
• nvd@nist.gov: NVD-CWE-noinfo

Primary references

• cna@sap.com — Exploit, Third Party Advisory, VDB Entry
• cna@sap.com — Exploit, Mailing List, Third Party Advisory
• cna@sap.com — Vendor Advisory
• cna@sap.com — Permissions Required, Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory, VDB Entry
• af854a3a-2127-422b-91ae-364da2661108 — Exploit, Mailing List, Third Party Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
• af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory