CVE-2012-2512
SAP NetWeaver 7.0 EHP1 and EHP2 - Denial of Service via Crafted SAP Diag Packet
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2012-2512.
AI-analyzed exploit summary The provided code is a functional Python exploit for CVE-2012-2512, targeting SAP Netweaver Dispatcher. It includes proof-of-concept code to trigger multiple vulnerabilities, including buffer overflows and denial-of-service conditions via crafted SAP Diag packets.
Description
The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.
Exploits (2)
The provided code is a functional Python exploit for CVE-2012-2512, targeting SAP Netweaver Dispatcher. It includes proof-of-concept code to trigger multiple vulnerabilities, including buffer overflows and denial-of-service conditions via crafted SAP Diag packets.
The provided Python script demonstrates multiple vulnerabilities in SAP Netweaver Dispatcher, including buffer overflows and denial-of-service conditions. It sends crafted SAP Diag packets to trigger specific functions like DiagTraceR3Info and DiagTraceHex, leading to potential remote code execution or crashes.