SAP security note 1820666, “Potential Remote Code Execution in SAProuter”. Below are the symptom, SAP recommended solution and the affected software components.
Description
Symptom
A critical buffer overflow vulnerability has been identified in SAProuter, allowing attackers to execute arbitrary code and gain complete control over the SAProuter application, including viewing, modifying, or deleting data.
Solution
Install the latest patched version of SAProuter as recommended in the SAP Note.
Reason and prerequisites
An attacker can exploit this vulnerability without authentication to inject malicious code into the system’s memory, leading to remote code execution or causing the SAProuter to crash.
CVSS
Score 9.3 Vector: AV:N/AC:M/AU:N/C:C/I:C/A:C
References
This note refers to
Referenced by
Affected components
- SAP KERNEL versions 6.40, 7.20, 7.21, 7.38, 7.40, 8.00 through 8.04 (multiple architectures)
- Detailed component versions are available in the SAP Note
Full note on SAP: SAP Support Launchpad note 1820666
Detailed exploitation and proof-of-concept material for this note is maintained in the RedRays Security Platform. For access, contact [email protected].