CVE-2015-7828

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2015-11-10 · updated 2026-06-17
Weakness: CWE-20

Description

SAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the (1) fcopydir, (2) fmkdir, (3) frmdir, (4) getenv, (5) dumpenv, (6) fcopy, (7) fput, (8) fdel, (9) fmove, (10) fget, (11) fappend, (12) fdir, (13) getTraces, (14) kill, (15) pexec, (16) stop, or (17) pythonexec method, aka SAP Security Note 2165583.

Affected products

SAP SE SAP HANA: through 1.00

References

http://packetstormsecurity.com/files/134281/SAP-HANA-TrexNet-Command-Execution.html
http://seclists.org/fulldisclosure/2015/Nov/36
https://www.onapsis.com/blog/analyzing-sap-security-notes-august-2015-edition
http://packetstormsecurity.com/files/134281/SAP-HANA-TrexNet-Command-Execution.html
http://seclists.org/fulldisclosure/2015/Nov/36
https://www.onapsis.com/blog/analyzing-sap-security-notes-august-2015-edition

Get alerted when CVE-2015-7828 or the next vulnerability affects your stack