What is the CVSS score of CVE-2013-3244?

CVE-2013-3244 has a CVSS 2.0 base score of 6.0 (Medium). CVSS vector: AV:N/AC:M/Au:S/C:P/I:P/A:P. EPSS exploitation probability: 1.1%.

Erp Central Component CVE-2013-3244

MEDIUM

Code Injection (CWE-94)

2013-10-24 cve@mitre.org

Code Injection SAP RCE Erp Central Component

6.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.0 MEDIUM

AV:N/AC:M/Au:S/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:P/I:P/A:P

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Oct 24, 2013 - 00:55 cve.org

MEDIUM 6.0

DescriptionCVE.org

Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for SAP ERP Central Component (ECC) allow remote attackers to execute arbitrary code via a (1) RFC or (2) SOAP-RFC request.

AnalysisAI

Technical ContextAI

This vulnerability is classified as Code Injection (CWE-94), which allows attackers to inject and execute arbitrary code within the application. Multiple unspecified vulnerabilities in the CJDB_FILL_MEMORY_FROM_PPB function in the Project System (PS-IS) module for SAP ERP Central Component (ECC) allow remote attackers to execute arbitrary code via a (1) RFC or (2) SOAP-RFC request. Affected products include: Sap Erp Central Component.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Never evaluate user-controlled input as code. Use sandboxing, disable dangerous functions, apply strict input validation.