CyberSec.Space Logo
CVEブラウザに戻る

CVE-2021-27610

CRITICAL
9.8
CVSS Severity Score
EPSS Score0.0060%
EPSS Percentile8.89th
Published2021年6月16日
Last Modified2024年11月21日

Vulnerability Description

SAP NetWeaver ABAP Server and ABAP Platform, versions - 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 804, does not create information about internal and external RFC user in consistent and distinguished format, which could lead to improper authentication and may be exploited by malicious users to obtain illegitimate access to the system.

Affected Platforms (CPE)

📦
Sap

Netweaver Abap

= 700
📦
Sap

Netweaver Abap

= 701
📦
Sap

Netweaver Abap

= 702
📦
Sap

Netweaver Abap

= 731
📦
Sap

Netweaver Abap

= 740
📦
Sap

Netweaver Abap

= 750
📦
Sap

Netweaver Abap

= 751
📦
Sap

Netweaver Abap

= 752
📦
Sap

Netweaver Abap

= 753
📦
Sap

Netweaver Abap

= 754
📦
Sap

Netweaver Abap

= 755
📦
Sap

Netweaver Abap

= 804
📦
Sap

Netweaver Application Server Abap

= 700
📦
Sap

Netweaver Application Server Abap

= 701
📦
Sap

Netweaver Application Server Abap

= 702
📦
Sap

Netweaver Application Server Abap

= 731
📦
Sap

Netweaver Application Server Abap

= 740
📦
Sap

Netweaver Application Server Abap

= 750
📦
Sap

Netweaver Application Server Abap

= 751
📦
Sap

Netweaver Application Server Abap

= 752
📦
Sap

Netweaver Application Server Abap

= 753
📦
Sap

Netweaver Application Server Abap

= 754
📦
Sap

Netweaver Application Server Abap

= 755
📦
Sap

Netweaver Application Server Abap

= 804

References & Advisories

🔗 https://launchpad.support.sap.com/#/notes/3007182
🔗 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999
🔗 https://launchpad.support.sap.com/#/notes/3007182
🔗 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=578125999

関連する脆弱性情報

CVE-2012-434110.0

Multiple stack-based buffer overflows in msg_server.exe in SAP NetWeaver ABAP 7.x allow remote attackers to cause a denial of serv...

CVE-2021-404999.8

Client-side printing services SAP Cloud Print Manager and SAPSprint for SAP NetWeaver Application Server for ABAP - versions 7.70,...

CVE-2020-62759.8

SAP Netweaver AS ABAP, versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 753, 754, are vulnerable for Server Side Re...

CVE-2019-03049.8

FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7....