« Volver al listado

CVE-2010-2347

Estado: ModificadaMedia (4.9)—

The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

SAP — J2ee Engine CoreSAP — Server Core

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-2347",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4.9,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:M/Au:S/C:P/I:P/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 4.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 6.8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-06-21T19:30:01.990",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0371.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/40223",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2010-005",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/511855/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/40916",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securitytracker.com/id?1024114",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59502",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://service.sap.com/sap/support/notes/1425847",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/fulldisclosure/2010-06/0371.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/40223",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2010-005",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/511855/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/40916",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securitytracker.com/id?1024114",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/59502",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://service.sap.com/sap/support/notes/1425847",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Telnet interface in the SAP J2EE Engine Core (SAP-JEECOR) 6.40 through 7.02, and Server Core (SERVERCORE) 7.10 through 7.30 allows remote authenticated users to bypass a security check and conduct SMB relay attacks via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "El interfaz Telnet en el SAP J2EE Engine Core (SAP-JEECOR) v6.40 hasta v7.02, y Server Core (SERVERCORE) v7.10 hasta la v7.30 permite a usuarios remotos autenticados evitar una comprobación de seguridad y realizar ataques de retransmisión de SMB a través de vectores sin especificar."
    }
  ],
  "lastModified": "2026-06-16T23:20:35.393",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sap:j2ee_engine_core:6.40:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AF47C84E-A928-471E-8866-9EFE8503C7B5"
            },
            {
              "criteria": "cpe:2.3:a:sap:j2ee_engine_core:7.00:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "0BAA9A27-40F8-4A2D-9988-4B25FC0E47C7"
            },
            {
              "criteria": "cpe:2.3:a:sap:j2ee_engine_core:7.01:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "586AF9AC-84C8-4C50-8053-2DB8525620AD"
            },
            {
              "criteria": "cpe:2.3:a:sap:j2ee_engine_core:7.02:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6911CBA7-2677-42E6-BC92-0389B0CEA104"
            }
          ],
          "operator": "OR"
        }
      ]
    },
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:sap:server_core:7.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "C7CE3526-F61B-4DA3-B1C0-7523CF3A82DF"
            },
            {
              "criteria": "cpe:2.3:a:sap:server_core:7.11:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4D1FCCA5-1C57-44A5-8DCE-3EC1DACC86DD"
            },
            {
              "criteria": "cpe:2.3:a:sap:server_core:7.20:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FC7EE990-5E12-480A-8721-AF926883819A"
            },
            {
              "criteria": "cpe:2.3:a:sap:server_core:7.30:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "1A2054E9-824C-4377-B845-CEA20965BB81"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}