The vulnerabilities of SAP NetWeaver AS ABAP and SAP NetWeaver ABAP software integration platforms are related to deficiencies in authentication procedures. These deficiencies allow attackers to circumvent security restrictions, enhance their privileges, and gain unauthorized access to protected information.

🗓️ 03 Aug 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 6 Views

Authentication flaws in NetWeaver ABAP allow bypassing security and unauthorized access via remote function call messages.

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2021-27610	30 Jun 202312:30	–	circl
CNNVD	SAP NetWeaver ABAP Server 和 ABAP Platform 授权问题漏洞	8 Jun 202100:00	–	cnnvd
CNVD	SAP NetWeaver AS ABAP and ABAP Platform Authentication Error Vulnerability	15 Jun 202100:00	–	cnvd
CVE	CVE-2021-27610	16 Jun 202114:45	–	cve
Cvelist	CVE-2021-27610	16 Jun 202114:45	–	cvelist
EUVD	EUVD-2021-14357	7 Oct 202500:30	–	euvd
Malwarebytes	Microsoft fixes seven zero-days, including two PuzzleMaker targets, Google fixes serious Android flaw	9 Jun 202114:50	–	malwarebytes
NCSC	Vulnerabilities fixed in SAP Netweaver	8 Jun 202100:00	–	ncsc
NCSC	Vulnerabilities fixed in SAP products	13 Jul 202100:00	–	ncsc
NVD	CVE-2021-27610	16 Jun 202115:15	–	nvd

Vulners

Node

sap sap_netweaver_as_abapMatch700

OR

sap sap_netweaver_as_abapMatch701

OR

sap sap_netweaver_as_abapMatch702

OR

sap sap_netweaver_as_abapMatch731

OR

sap sap_netweaver_as_abapMatch740

OR

sap sap_netweaver_as_abapMatch750

OR

sap sap_netweaver_as_abapMatch751

OR

sap sap_netweaver_as_abapMatch752

OR

sap sap_netweaver_as_abapMatch753

OR

sap sap_netweaver_as_abapMatch754

OR

sap sap_netweaver_as_abapMatch755

OR

sap sap_abap_platformMatch700

OR

sap sap_abap_platformMatch701

OR

sap sap_abap_platformMatch702

OR

sap sap_abap_platformMatch731

OR

sap sap_abap_platformMatch740

OR

sap sap_abap_platformMatch750

OR

sap sap_abap_platformMatch751

OR

sap sap_abap_platformMatch752

OR

sap sap_abap_platformMatch753

OR

sap sap_abap_platformMatch754

OR

sap sap_abap_platformMatch755

OR

sap sap_netweaver_as_abapMatch804

OR

sap sap_abap_platformMatch804

Source	Link
launchpad	www.launchpad.support.sap.com/
wiki	www.wiki.scn.sap.com/wiki/pages/viewpage.action
habr	www.habr.com/ru/companies/jetinfosystems/news/745844/
sec-consult	www.sec-consult.com/blog/detail/responsible-disclosure-of-an-exploit-chain-targeting-the-rfc-interface-implementation-in-sap-application-server-for-abap/
web	www.web.nvd.nist.gov/view/vuln/detail

03 Aug 2023 00:00Current

7.4High risk

Vulners AI Score7.4

CVSS 27.6

CVSS 39

EPSS0.01583

netweaver abap vulnerabilities authentication weaknesses bypass security unauthorized access remote function call privilege escalation security deficiencies