CVE-2012-2512 describes a denial-of-service vulnerability in the DiagTraceStreamI function within the Dispatcher component of SAP NetWeaver 7.0 EHP1 and EHP2. An unauthenticated remote attacker can exploit this by sending a specially crafted SAP Diag packet, causing the disp+work.exe daemon to crash. The vulnerability has a CVSS score of 5.0, indicating a medium severity. It is easily exploitable over the network with low attack complexity and requires no authentication, leading to a partial availability impact. While not listed on the CISA KEV catalog and showing no active exploitation, public exploit code exists on ExploitDB. Despite this, there is no recorded community discussion or media coverage, suggesting low public awareness.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
7.0CPE matchmatch criteria | cpe:2.3:a:sap:netweaver:7.0:ehp1:*:*:*:*:*:* | ||
7.0CPE matchmatch criteria | cpe:2.3:a:sap:netweaver:7.0:ehp2:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.