What is CVE-2015-8329?

CVE-2015-8329 is a vulnerability in Sap Manufacturing_integration_and_intelligence, classified under Cryptographic Issues. Published 2015-11-24.

Is CVE-2015-8329 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Sap Manufacturing_integration_and_intelligence

CVE-2015-8329

SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.010 (58.2th percentile) — read the EPSS interpretation.

Affected products

Sap Manufacturing_integration_and_intelligence — versions 12.2, 14.0, 15.0
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

Public proof-of-concept exploits

ARPSyndicate/cvemon

References

cve@mitre.org (x_refsource_MISC)
cve@mitre.org (VDB Entry, Third Party Advisory, x_refsource_MISC)
cve@mitre.org (mailing-list, x_refsource_FULLDISC)

Frequently asked questions

What is CVE-2015-8329?: CVE-2015-8329 is a vulnerability in Sap Manufacturing_integration_and_intelligence, classified under Cryptographic Issues. Published 2015-11-24.
Is CVE-2015-8329 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.