Description (CNA)
SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| SAP_SE / SAP CommonCryptoLib | affected 8 |
| SAP_SE / SAP NetWeaver AS ABAP, SAP NetWeaver AS Java and ABAP Platform of S/4HANA on-premise | affected KERNEL 7.22; affected KERNEL 7.53; affected KERNEL 7.54; affected KERNEL 7.77; affected KERNEL 7.85; affected KERNEL 7.89; affected KERNEL 7.91; affected KERNEL 7.92; affected KERNEL 7.93; affected KERNEL 8.04; affected KERNEL64UC 7.22; affected KERNEL64UC 7.22EXT; affected KERNEL64UC 7.53; affected KERNEL64UC 8.04; affected KERNEL64NUC 7.22; affected KERNEL64NUC 7.22EXT |
| SAP_SE / SAP Web Dispatcher | affected 7.22EXT; affected 7.53; affected 7.54; affected 7.77; affected 7.85; affected 7.89 |
| SAP_SE / SAP Content Server | affected 6.50; affected 7.53; affected 7.54 |
| SAP_SE / SAP HANA Database | affected 2.00 |
| SAP_SE / SAP Host Agent | affected 722 |
| SAP_SE / SAP Extended Application Services and Runtime (XSA) | affected SAP_EXTENDED_APP_SERVICES 1; affected XS_ADVANCED_RUNTIME 1.00 |
| SAP_SE / SAPSSOEXT | affected 17 |
CWE
CWE-787
References
- https://me.sap.com/notes/3327896
- https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.