CVE-2023-27500
Severity CVSS v4.0:
Pending analysis
Type:
CWE-22
Path Traversal
Publication date:
14/03/2023
Last modified:
01/02/2024
Description
An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this attack, no data can be read but potentially critical OS files can be over-written making the system unavailable.<br />
<br />
Impact
Base Score 3.x
8.10
Severity 3.x
HIGH
Vulnerable products and versions
| CPE | From | Up to |
|---|---|---|
| cpe:2.3:a:sap:netweaver_application_server_abap:700:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:701:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:702:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:731:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:740:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:750:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:751:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:752:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:753:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:754:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:755:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:756:*:*:*:*:*:*:* | ||
| cpe:2.3:a:sap:netweaver_application_server_abap:757:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page