CVE-2012-2514: SAP NetWeaver

Medium severity, CVSS 5.0. EPSS: 3.6% chance of exploitation in the next 30 days.

The DiagiEventSource function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service (daemon crash) via a crafted SAP Diag packet.

Affected products

  • SAP NetWeaver: version 7.0 only

Published 2012-05-15. Last modified 2026-06-16.