CVE-2015-8329

MEDIUM 5.0CVE-2015-8329 · Published 24/11/2015 · updated 17/06/2026

In short

CVE-2015-8329 is a MEDIUM (CVSS 5.0) vulnerability affecting manufacturing integration and intelligence (sap).
Chance of exploitation in the next 30 days (EPSS): 0.97%, higher than 61.8% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
manufacturing integration and intelligence sap	`= 12.2= 14.0= 15.0`	No fix yet

Description

SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274.

References

packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html · Third Party Advisory
seclists.org/fulldisclosure/2016/Feb/68
erpscan.io/advisories/erpscan-15-031-using-base64-and-des-in-sap-mii

More vulnerabilities in manufacturing integration and intelligence

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free