CVE-2022-22547

CVE-2022-22547 is a high-severity information disclosure vulnerability affecting SAP Simple Diagnostics Agent versions up to 1.57. An unauthenticated attacker can access restricted information by connecting to a randomly assigned port between 9000 and 65535. This allows for information gathering that could facilitate future attacks, though it does not directly impact integrity or availability. The vulnerability has a CVSS score of 7.5 (HIGH), indicating a network-based attack vector with low attack complexity and no user interaction required. While the potential impact is high for confidentiality, there is no known active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE. It is not listed in CISA's KEV catalog.