PT-2025-24595 · Sap · Sap Mdm Server

Published 2025-06-10 · Updated 2025-06-10 · CVE-2025-42994

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions SAP MDM Server (affected versions not specified)

Description The issue allows an attacker to send specially crafted packets to the SAP MDM Server, triggering a memory read access violation in the server process. This causes the server to fail and exit unexpectedly, resulting in high impact on availability with no impact on confidentiality and integrity of the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Weakness Enumeration

CWE-590

Related Identifiers

BDU:2025-06757

CVE-2025-42994

Affected Products

Sap Mdm Server

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-42994 · Security Note
• https://bdu.fstec.ru/vul/2025-06757 · Security Note
• https://t.me/cvetracker/25852 · Telegram Post
• https://me.sap.com/notes/3610006 · Note
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/june-2025.html · Note
• https://url.sap/sapsecuritypatchday · Note
• https://t.me/latest_high_impact_cve/2594 · Telegram Post