CVE-2015-8329
sap manufacturing integration and intelligence: no CVSS score yet. EPSS 1.0% chance of exploitation in the next 30 days.
SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274.
- EPSS
- 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWE
- CWE-310
- Published
- Modified
- Record from
- the NVD, synced
Affected
- sap:manufacturing_integration_and_intelligence
References
- http://packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html
- http://seclists.org/fulldisclosure/2016/Feb/68
- https://erpscan.io/advisories/erpscan-15-031-using-base64-and-des-in-sap-mii/
- http://packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html
- http://seclists.org/fulldisclosure/2016/Feb/68