Lucene search

K
cvelistSapCVELIST:CVE-2024-33008
HistoryMay 14, 2024 - 3:46 a.m.

CVE-2024-33008 Memory Corruption vulnerability in SAP Replication Server

2024-05-1403:46:17
sap
www.cve.org
5
sap
replication server
memory corruption
vulnerability
availability

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

5.9

Confidence

High

EPSS

0

Percentile

9.0%

SAP Replication Server allows an attacker to use gateway for executing some commands to RSSD. This could result in crashing the Replication Server due to memory corruption with high impact on Availability of the system.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "SAP Replication Server ",
    "vendor": "SAP_SE",
    "versions": [
      {
        "status": "affected",
        "version": "16.0"
      },
      {
        "status": "affected",
        "version": "16.0.3"
      },
      {
        "status": "affected",
        "version": "16.0.4"
      }
    ]
  }
]

CVSS3

4.9

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

AI Score

5.9

Confidence

High

EPSS

0

Percentile

9.0%

Related for CVELIST:CVE-2024-33008