Exploitation Summary
EIP tracks 2 public exploits for CVE-2013-3319.
PoCs published by devoteam-cybertrust, including Metasploit module auxiliary/scanner/sap/sap_hostctrl_getcomputersystem.
AI-analyzed exploit summary This is a Metasploit auxiliary module that exploits CVE-2013-3319 to retrieve system information from SAP Host Agent via the SOAP interface. It sends a crafted SOAP request to the SAP HostControl service to extract computer, OS, process, filesystem, and network port details.
Description
The GetComputerSystem method in the HostControl service in SAP Netweaver 7.03 allows remote attackers to obtain sensitive information via a crafted SOAP request to TCP port 1128.
Exploits (2)
This is a Metasploit auxiliary module that exploits CVE-2013-3319 to retrieve system information from SAP Host Agent via the SOAP interface. It sends a crafted SOAP request to the SAP HostControl service to extract computer, OS, process, filesystem, and network port details.
This Metasploit module exploits an information disclosure vulnerability in SAP Host Agent (CVE-2013-3319) by sending a SOAP request to retrieve system information such as computer details, OS metrics, processes, and filesystem data.