Auth bypass in SAP Netweaver As Abap

CVE-2022-27668

Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter administration commands in SAP NetWeaver and ABAP Platform - versions KERNEL 7.49, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.49, KRNL64UC 7.49, SAP_ROUTER 7.53, 7.22, from a remote client, for example stopping the SAProuter, that could highly impact systems availability.

Vulnerability class: Broken Access Control

EPSS: 0.021 (79.4th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.

Affected products

Weakness classification (CWE)

References

  • cna@sap.com (x_refsource_MISC, Vendor Advisory)
  • cna@sap.com (Permissions Required, x_refsource_MISC, Vendor Advisory)
  • cna@sap.com (mailing-list, Exploit, x_refsource_FULLDISC, Mailing List, Third Party Advisory)
  • cna@sap.com (Exploit, Third Party Advisory, x_refsource_MISC)

Frequently asked questions

What is CVE-2022-27668?
CVE-2022-27668 is a critical-severity vulnerability in SAP Netweaver As Abap, classified under Incorrect Authorization. CVSS score: 9.8/10. Published 2022-06-14.
How severe is CVE-2022-27668?
Critical severity. CVSS v3 base score is 9.8 out of 10.