CVE-2022-24396
CVE-2022-24396
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.5%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
08 Mar 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Simple Diagnostics Agent - versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via localhost on http port 3005. Due to lack of authentication checks, an attacker could access administrative or other privileged functionalities and read, modify, or delete sensitive information and configurations.
Affected products
SAP SE · SAP Focused Run (Simple Diagnostics Agent)Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →