SMB relay in BC-CCM-PRN, SAP security note 1821862

SAP security note 1821862, “SMB relay in BC-CCM-PRN”. Below are the symptom, SAP recommended solution and the affected software components.

Description

Symptom

The component “Printing” enables an SMB relay attack in the function module RSPO_READ_DATASET_BLOCK.

Solution

• Option 1: Import the Support Package SAPKB73010 specified in this SAP Note.
• Option 2: Implement the attached correction instructions to render the function module unusable.

Reason and prerequisites

The obsolete function module RSPO_READ_DATASET_BLOCK was delivered incorrectly.

CVSS

Score 2.3 Vector: AV:A/AC:M/AU:S/C:P/I:N/A:N

References

• Automatic checks for security notes using RSECNOTE (outdated)

Affected components

• SAP_BASIS 730