Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SAP Manufacturing Integration and Intelligence (aka MII, formerly xMII) uses weak encryption (Base64 and DES), which allows attackers to conduct downgrade attacks and decrypt passwords via unspecified vectors, aka SAP Security Note 2240274.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SAP Manufacturing Integration and Intelligence 加密问题漏洞
Vulnerability Description
SAP Manufacturing Integration and Intelligence（又名MII，前称xMII）是德国思爱普（SAP）公司的一套将核心的生产制造系统与企业流程集成的平台系统。该系统支持创建融合了制造工程、制造执行和企业工作流程的复合应用，如多类型BOM数据的双向传递与同步、生产计划信息的同步与集成、各项制造相关的KPI指标分析和报警等。 SAP MII中存在安全漏洞，该漏洞源于程序使用弱加密算法（Base64和DES）。攻击者可利用该漏洞实施降级攻击，破解密码。
CVSS Information
N/A
Vulnerability Type
N/A