Vulnetix
Try Vulnetix Request Demo
CVE-2021-33684 PUBLISHED CVSS 5.300000190734863 MEDIUM

SAP NetWeaver AS ABAP and ABAP Platform, versions - KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 8.04, 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.53, 7.77, 7.81, 7.84, allows an attacker to send overlong content in the RFC request type thereby crashing the corresponding work process because of memory corruption vulnerability. The work process will attempt to restart itself after the crash and hence the impact on the availability is low.

EPSS 0.18% · 39.8th percentile

Risk Scores

CVSS v3.0
5.300000190734863
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
EPSS Score
0.18%
39.8th percentile

Affected Products

VendorProductVersions
sapnetweaver_application_server_abapkrnl64uc_8.04, krnl64nuc_7.21, krnl32uc_7.21
SAP SESAP NetWeaver AS ABAP and ABAP Platform< 7.84, < KRNL32NUC 7.21, < 7.21EXT
sapnetweaver_abapkrnl64uc_8.04, krnl64nuc_7.21, krnl32uc_7.21

Timeline

References

Open in Interactive Console →