Description
A malicious user can remotely exploit sapstartsrv process and render it unavailable, as well as -potentially -the resources that are used to serve sapcontrol requests.
Available fix and Supported packages
- KRNL32NUC | 6.40 | 6.40EX2
- KRNL32NUC | 7.00 | 7.01
- KRNL32NUC | 7.10 | 7.11
- KRNL32UC | 6.40 | 6.40EX2
- KRNL32UC | 7.00 | 7.01
- KRNL32UC | 7.10 | 7.11
- KRNL64NUC | 6.40 | 6.40EX2
- KRNL64NUC | 7.00 | 7.01
- KRNL64NUC | 7.10 | 7.11
- KRNL64UC | 6.40 | 6.40EX2
- KRNL64UC | 7.00 | 7.01
- KRNL64UC | 7.10 | 7.11
- KERNEL | 6.40 | 6.40
- KERNEL | 7.00 | 7.01
- KERNEL | 7.10 | 7.11
Affected component
- BC-CST-STS
Startup Service
CVSS
Score: 0
PoC
Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.
URL
https://launchpad.support.sap.com/#/notes/1469804
