CVE-2022-27668

published 2022-06-14

CVE-2022-27668: Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter…

Priority P2 65 critical 9.8 CVSS 3.1

AV N AC L PR N UI N S U C H I H A H

Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter administration commands in SAP NetWeaver and ABAP Platform - versions KERNEL 7.49, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.49, KRNL64UC 7.49, SAP_ROUTER 7.53, 7.22, from a remote client, for example stopping the SAProuter, that could highly impact systems availability.

Affected

22 ranges

Vendor	Product	Version range	Fixed in
sap	netweaver_as_abap	—	—
sap	netweaver_as_abap	—	—
sap	netweaver_as_abap	—	—
sap	netweaver_as_abap	—	—
sap	netweaver_as_abap	—	—
sap	netweaver_as_abap	—	—
sap	netweaver_as_abap	—	—
sap	netweaver_as_abap_krnl64nuc	—	—
sap	netweaver_as_abap_krnl64uc	—	—
sap	router	—	—
sap	router	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap_se	sap_netweaver_and_abap_platform	—	—
sap_se	sap_netweaver_and_abap_platform	—	—

CVSS provenance

nvd v3.1 9.8 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

nvd v2.0 7.5 HIGH AV:N/AC:L/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-863