CVE-2012-2514

CVE-2012-2514 describes a denial-of-service vulnerability in the DiagiEventSource function of disp+work.exe within the Dispatcher component of SAP NetWeaver 7.0 EHP1 and EHP2. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted SAP Diag packet, leading to a daemon crash and service disruption. The vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, resulting in a partial impact on availability. While not listed in KEV, exploit code is publicly available through ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.