This vulnerability (CWE-862) in SAP Manufacturing Integration and Intelligence 15.5 arises from missing authorization checks on scheduling-related functions. An unauthenticated remote attacker can exploit this flaw to perform unauthorized actions on scheduling data, including retrieval, creation, modification, or deletion. The CVSS 3.1 base score is 7.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability rated as low. No official patch or remediation level has been provided yet, and no known exploits are reported in the wild.

Successful exploitation allows unauthorized access and manipulation of scheduling data, which can lead to unauthorized disclosure, alteration, or deletion of this data. The impact on confidentiality, integrity, and availability is assessed as low individually, but combined these impacts contribute to a high severity rating (CVSS 7.3). There is no indication of privilege escalation or broader system compromise from the provided data.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is indicated, users should monitor SAP advisories for updates. Until a patch is available, restrict network access to the affected SAP Manufacturing Integration and Intelligence 15.5 instance and apply compensating controls as recommended by SAP when available.