CVE-2017-15293

CRITICO 9.8CVE-2017-15293 · Published 16/10/2017 · updated 17/06/2026

In breve

CVE-2017-15293 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda point of sale xpress server (sap).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.9%, superiore al 90.4% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
point of sale xpress server sap	`= 1020= 1030`	No fix yet

Description

Xpress Server in SAP POS does not require authentication for file read and erase operations, daemon shutdown, terminal read operations, or certain attacks on credentials. This is SAP Security Note 2520064.

References

securityfocus.com/bid/100713 · Third Party Advisory
blogs.sap.com/2017/09/12/sap-security-patch-day-september-2017 · Issue Tracking
erpscan.io/advisories/erpscan-17-032-sap-pos-missing-authentication-xpressserver
erpscan.io/research/hacking-sap-pos

Altre vulnerabilità di point of sale xpress server

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free