CVE-2021-27607
Severity Score
7.5
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
SAP NetWeaver ABAP Server and ABAP Platform (Dispatcher), versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, allows an unauthenticated attacker without specific knowledge of the system to send a specially crafted packet over a network which will trigger an internal error in the system due to improper input validation in method ThSncIn() causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
SAP NetWeaver ABAP Server y ABAP Platform (Dispatcher), versiones - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT, 7.49, KRNL64UC - 8.04,7.22,7.22EXT, 7.49,7.53,7.73 , KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83, permite a un atacante no autenticado sin conocimiento específico del sistema enviar un paquete especialmente diseñado a través de una red que desencadenará un error interno en el sistema debido a una comprobación inapropiada de entrada en el método ThSncIn(), causando el bloqueo del sistema y hacer que no esté disponible. En este ataque, ningún dato del sistema puede ser visualizado o modificado
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2021-02-23 CVE Reserved
- 2021-06-09 CVE Published
- 2024-02-23 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-476: NULL Pointer Dereference
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999 | 2022-10-31 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | kernel_7.22 Search vendor "Sap" for product "Netweaver As Abap" and version "kernel_7.22" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | kernel_7.49 Search vendor "Sap" for product "Netweaver As Abap" and version "kernel_7.49" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | kernel_7.53 Search vendor "Sap" for product "Netweaver As Abap" and version "kernel_7.53" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | kernel_7.73 Search vendor "Sap" for product "Netweaver As Abap" and version "kernel_7.73" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | kernel_7.77 Search vendor "Sap" for product "Netweaver As Abap" and version "kernel_7.77" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | kernel_7.81 Search vendor "Sap" for product "Netweaver As Abap" and version "kernel_7.81" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | kernel_7.82 Search vendor "Sap" for product "Netweaver As Abap" and version "kernel_7.82" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | kernel_7.83 Search vendor "Sap" for product "Netweaver As Abap" and version "kernel_7.83" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | kernel_8.04 Search vendor "Sap" for product "Netweaver As Abap" and version "kernel_8.04" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl32nuc_7.22 Search vendor "Sap" for product "Netweaver As Abap" and version "krnl32nuc_7.22" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl32nuc_7.22ext Search vendor "Sap" for product "Netweaver As Abap" and version "krnl32nuc_7.22ext" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl32uc_7.22 Search vendor "Sap" for product "Netweaver As Abap" and version "krnl32uc_7.22" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl32uc_7.22ext Search vendor "Sap" for product "Netweaver As Abap" and version "krnl32uc_7.22ext" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl64nuc_7.22 Search vendor "Sap" for product "Netweaver As Abap" and version "krnl64nuc_7.22" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl64nuc_7.22ext Search vendor "Sap" for product "Netweaver As Abap" and version "krnl64nuc_7.22ext" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl64nuc_7.49 Search vendor "Sap" for product "Netweaver As Abap" and version "krnl64nuc_7.49" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl64uc_7.22 Search vendor "Sap" for product "Netweaver As Abap" and version "krnl64uc_7.22" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl64uc_7.22ext Search vendor "Sap" for product "Netweaver As Abap" and version "krnl64uc_7.22ext" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl64uc_7.49 Search vendor "Sap" for product "Netweaver As Abap" and version "krnl64uc_7.49" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl64uc_7.53 Search vendor "Sap" for product "Netweaver As Abap" and version "krnl64uc_7.53" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl64uc_7.73 Search vendor "Sap" for product "Netweaver As Abap" and version "krnl64uc_7.73" | - |
Affected
| ||||||
| Sap Search vendor "Sap" | Netweaver As Abap Search vendor "Sap" for product "Netweaver As Abap" | krnl64uc_8.04 Search vendor "Sap" for product "Netweaver As Abap" and version "krnl64uc_8.04" | - |
Affected
| ||||||