Description (CNA)
Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53) allows an attacker to prevent users from accessing its services through a denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP SE / SAP NetWeaver Internet Communication Manager (KRNL32NUC) | affected < 7.21; affected < 7.21EXT; affected < 7.22; affected < 7.22EXT |
| SAP SE / SAP NetWeaver Internet Communication Manager (KRNL32UC) | affected < 7.21; affected < 7.21EXT; affected < 7.22; affected < 7.22EXT |
| SAP SE / SAP NetWeaver Internet Communication Manager (KRNL64NUC) | affected < 7.21; affected < 7.21EXT; affected < 7.22; affected < 7.22EXT; affected < 7.49 |
| SAP SE / SAP NetWeaver Internet Communication Manager (KRNL64UC) | affected < 7.21; affected < 7.21EXT; affected < 7.22; affected < 7.22EXT; affected < 7.49 |
| SAP SE / SAP NetWeaver Internet Communication Manager (KERNEL) | affected < 7.21; affected < 7.22; affected < 7.49; affected < 7.53 |
CWE
No CWE identifiers supplied.
References
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533671771
- https://launchpad.support.sap.com/#/notes/2848498
ADP enrichment
No English description supplied.