SAP Note 1497622
SAP Security Note
High priority
SAP Security Note
High priority
SAP security note 1497622, “EC-EIS: Loading any source code using FM KXXC_DOWNLOAD”, is a program error note released on 12.10.2010. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
Due to an error in the EC-EIS Active Excel, it is possible for an attacker to execute any user-defined source code. This enables the attacker to gain control over the system and obtain secure increased privileges.
Solution
Implement the attached corrections.
Reason and prerequisites
There is a program error.
CVSS
Score 0
References
This note refers to
Affected components
- SAP_APPL 46C
- SAP_APPL 470
- SAP_APPL 500
- SAP_APPL 600
- SAP_APPL 602
- SAP_APPL 603
- SAP_APPL 604
- SAP_APPL 605
Full note on SAP: SAP Support Launchpad note 1497622
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].