by Kastro
Paper/Archive/CVE-2021-38163

CVE-2021-38163

SAP SE SAP NetWeaver (Visual Composer 7.0 RT) — SAP NetWeaver Unrestricted File Upload Vulnerability

KEV · due 30 JunEPSS 37%public exploitSSVC actCVSS 9.9
critical.is priorityof 100
99
CVSS 9.9 (CNA)9.9 / 10 × 3029.7In CISA KEV+3030.0EPSS percentile 98.5.985 × 2019.7Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of running operating system commands with the privilege of the Java Server process. These commands can be used to read or modify any information on the server or shut the server down making it unavailable.

Affected

ProductAffectedFixed inSource
SAP NetWeaver (Visual Composer 7.0 RT)7.30–CNA
SAP NetWeaver (Visual Composer 7.0 RT)7.31–CNA
SAP NetWeaver (Visual Composer 7.0 RT)7.40–CNA
SAP NetWeaver (Visual Composer 7.0 RT)7.50–CNA

Scores by source

sap (CNA)9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: no · Technical impact: total

References

refwiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405reflaunchpad.support.sap.com/#/notes/3084487refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-38163kevcisa.gov/known-exploited-vulnerabilities-catalog