Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2022-27668

Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter administration commands in SA

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
sap

Description

Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter administration commands in SAP NetWeaver and ABAP Platform - versions KERNEL 7.49, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.49, KRNL64UC 7.49, SAP_ROUTER 7.53, 7.22, from a remote client, for example stopping the SAProuter, that could highly impact systems availability.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

SAP SE SAP NetWeaver and ABAP Platform

  • KERNEL 7.49affected
  • 7.77affected
  • 7.81affected
  • 7.85affected
  • 7.86affected
  • 7.87affected
  • 7.88affected
  • KRNL64NUC 7.49affected
  • KRNL64UC 7.49affected
  • SAP_ROUTER 7.53affected
  • 7.22affected

References