CVE-2021-33701

Опубликовано: 15 сент. 2021

Источник: nvd

CVSS3: 9.1

CVSS2: 6.5

EPSS Низкий

Описание

DMIS Mobile Plug-In or SAP S/4HANA, versions - DMIS 2011_1_620, 2011_1_640, 2011_1_700, 2011_1_710, 2011_1_730, 710, 2011_1_731, 710, 2011_1_752, 2020, SAPSCORE 125, S4CORE 102, 102, 103, 104, 105, allows an attacker with access to highly privileged account to execute manipulated query in NDZT tool to gain access to Superuser account, leading to SQL Injection vulnerability, that highly impacts systems Confidentiality, Integrity and Availability.

Ссылки

http://packetstormsecurity.com/files/165303/SAP-Netweaver-IUUC_RECON_RC_COUNT_TABLE_BIG-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/165304/SAP-Netweaver-IUUC_RECON_RC_COUNT_TABLE_BIG-ABAP-Code-Injection.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2021/Dec/35
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Dec/36
Exploit
Mailing List
Third Party Advisory
https://launchpad.support.sap.com/#/notes/3078312
Permissions Required
VDB Entry
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806
Vendor Advisory
http://packetstormsecurity.com/files/165303/SAP-Netweaver-IUUC_RECON_RC_COUNT_TABLE_BIG-SQL-Injection.html
Exploit
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/165304/SAP-Netweaver-IUUC_RECON_RC_COUNT_TABLE_BIG-ABAP-Code-Injection.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2021/Dec/35
Exploit
Mailing List
Third Party Advisory
http://seclists.org/fulldisclosure/2021/Dec/36
Exploit
Mailing List
Third Party Advisory
https://launchpad.support.sap.com/#/notes/3078312
Permissions Required
VDB Entry
Vendor Advisory
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:sap:dmis:710:*:*:*:*:*:*:*

cpe:2.3:a:sap:dmis:2011_1_620:*:*:*:*:*:*:*

cpe:2.3:a:sap:dmis:2011_1_640:*:*:*:*:*:*:*

cpe:2.3:a:sap:dmis:2011_1_700:*:*:*:*:*:*:*

cpe:2.3:a:sap:dmis:2011_1_710:*:*:*:*:*:*:*

cpe:2.3:a:sap:dmis:2011_1_730:*:*:*:*:*:*:*

cpe:2.3:a:sap:dmis:2011_1_731:*:*:*:*:*:*:*

cpe:2.3:a:sap:dmis:2011_1_752:*:*:*:*:*:*:*

cpe:2.3:a:sap:dmis:2020125:*:*:*:*:*:*:*

cpe:2.3:a:sap:s4core:102:*:*:*:*:*:*:*

cpe:2.3:a:sap:s4core:103:*:*:*:*:*:*:*

cpe:2.3:a:sap:s4core:104:*:*:*:*:*:*:*

cpe:2.3:a:sap:s4core:105:*:*:*:*:*:*:*

cpe:2.3:a:sap:sapscore:125:*:*:*:*:*:*:*

EPSS

Процентиль: 79%

0.01249

Низкий

9.1 Critical

CVSS3

9.1 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-ch32-3mmp-49c5

CVSS3: 9.1

github

больше 3 лет назад

BDU:2022-01559

CVSS3: 9.1

fstec

больше 4 лет назад

Уязвимость программной платформы SAP S/4HANA и сервера контроля импорта DMIS Mobile Plug-In, связанная с непринятием мер по защите структуры запроса SQL, позволяющая нарушителю выполнить произвольные SQL-запросы

EPSS

Процентиль: 79%

0.01249

Низкий

9.1 Critical

CVSS3

9.1 Critical

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-89