Skip to content
OpenAdvisories
Unscored CVE-2022-27668 EUVD-2022-32165GHSA-9xfm-7rcv-qrx6

Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execut…

Published Jun 14, 2022 · Updated Aug 3, 2024 · Assigned by sap

Vendor: SAP Product: SAP NetWeaver and ABAP Platform

Description

Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter administration commands in SAP NetWeaver and ABAP Platform - versions KERNEL 7.49, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.49, KRNL64UC 7.49, SAP_ROUTER 7.53, 7.22, from a remote client, for example stopping the SAProuter, that could highly impact systems availability.

Affected products

VendorProductAffectedFixed
SAP SE SAP NetWeaver and ABAP Platform KERNEL 7.49, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.49, KRNL64UC 7.49, SAP_ROUTER 7.53, 7.22 —

References