Cyberdudebivash

        URGENT: Chained Exploits in SAP NetWeaver (CVE-2025-31324, CVE-2025-42999) Lead to Full RCE     By CyberDudeBivash • September 28, 2025, 10:17 AM IST • Enterprise Security Directive   This is a critical security directive for all SAP Basis, Security, and SOC teams. A sophisticated chained exploit is being actively used in the wild to achieve full Remote Code Execution (RCE) on SAP NetWeaver application servers. The attack leverages an unauthenticated Information Disclosure vulnerability in the SAP Message Server (**CVE-2025-31324**) to perform reconnaissance, followed by the exploitation of a critical authenticated RCE in the Internet Communication Manager (ICM) (**CVE-2025-42999**). An attacker with any low-privilege user account can leverage this chain to gain full control of your SAP system, with the privileges of the ` adm` user. Given that SAP systems are the heart of your enterprise—managing finance, HR, and logistics—this is a c...