Auth bypass in SAP Netweaver As Abap
CVE-2022-27668
Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter administration commands in SAP NetWeaver and ABAP Platform - versions KERNEL 7.49, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.49, KRNL64UC 7.49, SAP_ROUTER 7.53, 7.22, from a remote client, for example stopping the SAProuter, that could highly impact systems availability.
Vulnerability class: Broken Access Control
Published · last modified .
CVSS v3 metric
CVSS v3 base score 9.8 (Critical). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H.
EPSS exploit prediction
EPSS: 0.022 (81.6th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 82nd percentile — 81.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.022 · newest: 0.022 · change: 0.000
Affected products
- SAP Netweaver As Abap — versions kernel_7.49, kernel_7.77, kernel_7.81
- SAP Netweaver As Abap Krnl64nuc — versions 7.49
- SAP Netweaver As Abap Krnl64uc — versions 7.49
- SAP Router — versions 7.22, 7.53
- SAP Se Netweaver And Abap Platform — versions KERNEL 7.49, 7.77, 7.81
Weakness classification (CWE)
References
- www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html (Vendor Advisory)
- launchpad.support.sap.com/ (Permissions Required, Vendor Advisory)
- seclists.org/fulldisclosure/2022/Sep/17 (mailing-list, Exploit, Mailing List, Third Party Advisory)
- packetstormsecurity.com/files/168406/SAP-SAProuter-Improper-Access-Control.html (Exploit, Third Party Advisory)
Frequently asked questions
- What is CVE-2022-27668?
- CVE-2022-27668 is a critical-severity vulnerability in SAP Netweaver As Abap, classified under Incorrect Authorization. CVSS score: 9.8/10. Published 2022-06-14.
- How severe is CVE-2022-27668?
- Critical severity. CVSS v3 base score is 9.8 out of 10.