CVE-2015-8329

EUVD-2015-8213
SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 35%
Affected Products (NVD)
VendorProductVersion
sapmanufacturing_integration_and_intelligence
12.2
sapmanufacturing_integration_and_intelligence
14.0
sapmanufacturing_integration_and_intelligence
15.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html
http://seclists.org/fulldisclosure/2016/Feb/68
https://erpscan.io/advisories/erpscan-15-031-using-base64-and-des-in-sap-mii/
http://packetstormsecurity.com/files/135761/SAP-MII-12.2-14.0-15.0-Cryptography-Issues.html
http://seclists.org/fulldisclosure/2016/Feb/68
https://erpscan.io/advisories/erpscan-15-031-using-base64-and-des-in-sap-mii/