Skip links
RedRays - Your SAP Security Solution
Picture of Vahagn Vardanian

Vahagn Vardanian

Co-founder and CTO of RedRays

SAP Security on Udemy

Code injection vulnerability in SV-SMG-SDD, SAP security note 2085588

SAP Note 2085588
SAP Security Note
High priority

SAP security note 2085588, “Code Injection Vulnerability in SV-SMG-SDD”, is a program error note released on 21.05.2015. Below are the symptom and SAP recommended solution.

ComponentService Data Download (SV-SMG-SDD)
CategoryProgram error
PriorityCorrection with high priority
TypeSAP Security Note
Version4
StatusReleased for Customer
Released on21.05.2015

Description

Symptom

SV-SMG-SDD contains code that permits the execution of arbitrary OS commands on the SAP application server. An attacker can control the system’s behavior or potentially escalate privileges by executing malicious code without having legitimate credentials.

Solution

Implement the correction instructions provided in SAP Security Note 2085588.

CVSS

Score 6.0 / 10 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P

Full note on SAP: SAP Support Launchpad note 2085588

Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].

#code injection #OS commands #SV-SMG-SDD #privilege escalation

Explore More