SAP Network Interface Router vulnerabilities

3 CVEs affecting SAP Network Interface Router, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2014-8589, published 2014-11-04.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2013-6817, published 2013-11-20. Medium severity, CVSS 6.8. EPSS: 2.7% chance of exploitation in the next 30 days. Heap-based buffer overflow in SAP Network Interface Router (SAProuter) 7.30 allows remote attackers to cause a denial of service and execute arbitrary code via crafted NI Route messages.
• CVE-2013-7093, published 2013-12-13. Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days. SAP Network Interface Router (SAProuter) 39.3 SP4 allows remote attackers to bypass authentication and modify the configuration via unspecified vectors.
• CVE-2014-8589, published 2014-11-04. Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days. Integer overflow in SAP Network Interface Router (SAProuter) 40.4 allows remote attackers to cause a denial of service (resource consumption) via crafted requests.