SAP Saplpd vulnerabilities

4 CVEs affecting SAP Saplpd, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-10079, published 2017-02-01.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2008-0621, published 2008-02-06. High severity, CVSS 7.5. EPSS: 73.4% chance of exploitation in the next 30 days. Buffer overflow in SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to execute arbitrary code via long arguments to the (1) 0x01, (2) 0x02, (3) 0x03,…
CVE-2016-10079, published 2017-02-01. High severity, CVSS 7.5. EPSS: 6.5% chance of exploitation in the next 30 days. SAPlpd through 7400.3.11.33 in SAP GUI 7.40 on Windows has a Denial of Service vulnerability (service crash) with a long string to TCP port 515.
CVE-2008-0620, published 2008-02-06. High severity, CVSS 10.0. EPSS: 3.3% chance of exploitation in the next 30 days. SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command, which causes the server to terminate.
CVE-2006-7220, published 2007-07-10. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. Unspecified vulnerability in SAP SAPLPD and SAPSPRINT allows remote attackers to cause a denial of service (application crash) via a certain print job request. NOTE: the provenance of this…