SAP Remote Function Call (RFC) Vulnerabilities in 2023

In 2007, Onapsis CEO & Co-founder Mariano Nuñez presented several vulnerabilities and attacks affecting the RFC Protocol at Black Hat Europe. That presentation became a call-to-action for the research community to dedicate time into improving the security of SAP applications and SAP Protocols.

On June 29, 2023–sixteen years later–Fabian Hagg, a security researcher with vast experience in SAP applications, presented at the TROOPERS Conference in Heidelberg, providing …