by Kastro
Paper/Archive/CVE-2021-38176

CVE-2021-38176

SAP SE SAP S/4HANA — Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed…

EPSS 1%CVSS 9.9
critical.is priorityof 100
44
CVSS 9.9 (CNA)9.9 / 10 × 3029.7Not in CISA KEV+300.0EPSS percentile 69.8.698 × 2014.0No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Due to improper input sanitization, an authenticated user with certain specific privileges can remotely call NZDT function modules listed in Solution Section to execute manipulated query or inject ABAP code to gain access to Backend Database. On successful exploitation the threat actor could completely compromise confidentiality, integrity, and availability of the system.

Affected

ProductAffectedFixed inSource
SAP S/4HANA< 1511–CNA
SAP S/4HANA< 1610–CNA
SAP S/4HANA< 1709–CNA
SAP S/4HANA< 1809–CNA
SAP S/4HANA< 1909–CNA
SAP S/4HANA< 2020–CNA
SAP S/4HANA< 2021–CNA
SAP LT Replication Server< 2.0–CNA
SAP LT Replication Server< 3.0–CNA
SAP LTRS for S/4HANA< 1.0–CNA
SAP Test Data Migration Server< 4.0–CNA
SAP Landscape Transformation< 2.0–CNA

Scores by source

sap (CNA)9.9CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

References

refwiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405reflaunchpad.support.sap.com/#/notes/3089831