| Package | Affected versions | Patched versions |
|---|---|---|
| netweaver as abap | = kernel_7.49= kernel_7.77= kernel_7.81= kernel_7.85= kernel_7.86= kernel_7.87= kernel_7.88 | |
| netweaver as abap krnl64nuc | = 7.49 | |
| netweaver as abap krnl64uc | = 7.49 | |
| router | = 7.22= 7.53 |
Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter administration commands in SAP NetWeaver and ABAP Platform - versions KERNEL 7.49, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.49, KRNL64UC 7.49, SAP_ROUTER 7.53, 7.22, from a remote client, for example stopping the SAProuter, that could highly impact systems availability.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free