CVE-2015-8330
The PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of...
The PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of service (memory corruption and agent crash) via crafted xMII requests, aka SAP Security Note 2238619.
Exploit likelihood
What each source reports
NVD Score used
The PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of service (memory corruption and agent crash) via crafted xMII requests, aka SAP Security Note 2238619.
- Record
CVE-2015-8330- CVSS 2.0
- 7.8 High
AV:N/AC:L/Au:N/C:N/I:N/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of service (memory corruption and agent crash) via crafted xMII requests, aka SAP Security Note 2238619.
- Record
CVE-2015-8330- Updated
- 2026-11-02
EUVDEUVD-2015-8214 No score
The PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of service (memory corruption and agent crash) via crafted xMII requests, aka SAP Security Note 2238619.
- Record
EUVD-2015-8214- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qpxh-p9wh-6789 No score
The PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of...
The PCo agent in SAP Plant Connectivity (PCo) allows remote attackers to cause a denial of service (memory corruption and agent crash) via crafted xMII requests, aka SAP Security Note 2238619.
- Record
GHSA-qpxh-p9wh-6789- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-8330 is a high vulnerability (CVSS 7.8) in Sap Plant Connectivity, published November 24, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.96%, the 87th percentile. No source names a fixed version.
References
seclists.org/fulldisclosure/2016/Feb/69
onapsis.com/blog/analyzing-sap-security-notes-november-2015
erpscan.io/advisories/erpscan-15-032-sap-pco-agent-dos-vulnerability
securityfocus.com/archive/1/537517/100/0/threaded
packetstormsecurity.com/files/135775/SAP-PCo-2.2-2.3-15.0-15.1-Denial-Of-Service.html
nvd.nist.gov/vuln/detail/CVE-2015-8330
github.com/advisories/GHSA-qpxh-p9wh-6789