Skip to content
OpenAdvisories
Medium · 5.9 CVE-2020-6304 EUVD-2020-27454GHSA-86r6-3wmr-wv39

Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.2…

Published Jan 14, 2020 · Updated Aug 4, 2024 · Assigned by sap

Description

Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53) allows an attacker to prevent users from accessing its services through a denial of service.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver Internet Communication Manager (KRNL32NUC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT —
SAP SE SAP NetWeaver Internet Communication Manager (KRNL32UC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT —
SAP SE SAP NetWeaver Internet Communication Manager (KRNL64NUC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT, < 7.49 —
SAP SE SAP NetWeaver Internet Communication Manager (KRNL64UC) < 7.21, < 7.21EXT, < 7.22, < 7.22EXT, < 7.49 —
SAP SE SAP NetWeaver Internet Communication Manager (KERNEL) < 7.21, < 7.22, < 7.49, < 7.53 —

References