by Kastro
Paper/Archive/CVE-2022-26100

CVE-2022-26100

SAP SE SAPCAR — SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive.

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 67.3.673 × 2013.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SAPCAR - version 7.22, does not contain sufficient input validation on the SAPCAR archive. As a result, the SAPCAR process may crash, and the attacker may obtain privileged access to the system.

Affected

ProductAffectedFixed inSource
SAPCAR< 7.22–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

reflaunchpad.support.sap.com/#/notes/3111110refdam.sap.com/mac/embed/public/pdf/a/ucQrx6G.htm?rc=10