Description
A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup (Software Installation Program) - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the attackers control.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP | SapSetup (Software Installation Program) | 9.0 | — |
Advisories 1
- WID-SEC-2023-0904 SAP Patchday April 2023 BSI CERT-Bund (WID) · Apr 10, 2023