Description
Due to DLL injection vulnerability in SAPSetup, an attacker with either local user privileges or with access to a compromised corporate user�s Windows account could gain higher privileges. With this, he could move laterally within the network and further compromise the active directory of a company. This leads to high impact on confidentiality, integrity and availability of the Windows server.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SAP_SE | SAPSetup | LMSAPSETUP 9.0 | — |
Advisories 2
- NCSC-2025-0007 Kwetsbaarheden verholpen in SAP producten NCSC-NL (Netherlands) · Jan 14, 2025
- WID-SEC-2025-0051 SAP Patchday Januar 2025: Mehrere Schwachstellen BSI CERT-Bund (WID) · Jan 13, 2025