SAP Netweaver Insecure Deserialization Vulnerability (3634501)

#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##

include('compat.inc');

if (description)
{
  script_id(264635);
  script_version("1.1");
  script_set_attribute(attribute:"plugin_modification_date", value:"2025/09/12");

  script_cve_id("CVE-2025-42944");
  script_xref(name:"IAVA", value:"2025-A-0675");

  script_name(english:"SAP Netweaver Insecure Deserialization Vulnerability (3634501)");

  script_set_attribute(attribute:"synopsis", value:
"The remote SAP Netweaver is affected by an insecure deserialization vulnerability.");
  script_set_attribute(attribute:"description", value:
"SAP NetWeaver is affected by an insecure deserialization vulnerability within the RMI-P4 module, when deserializing Java
Objects. This could allow an un authenticated attacker to potentially, via malicious payload, to execute arbitrary OS
commands.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version
number.");
  script_set_attribute(attribute:"see_also", value:"https://me.sap.com/notes/3634501");
  script_set_attribute(attribute:"solution", value:
"Apply the appropriate patch according to the vendor advisory.");
  script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H");
  script_set_attribute(attribute:"cvss_score_source", value:"CVE-2025-42944");

  script_set_attribute(attribute:"vuln_publication_date", value:"2025/09/10");
  script_set_attribute(attribute:"patch_publication_date", value:"2025/09/10");
  script_set_attribute(attribute:"plugin_publication_date", value:"2025/09/12");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:sap:netweaver");
  script_set_attribute(attribute:"stig_severity", value:"I");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"Web Servers");

  script_copyright(english:"This script is Copyright (C) 2025 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("sap_nw_p4lib_detection.nbin");
  script_require_keys("installed_sw/SAP NetWeaver p4lib");

  exit(0);
}

include('vcf.inc');

var app_info = vcf::get_app_info(app:'SAP NetWeaver p4lib');

var constraints = [
  {'min_version' : '7.50', 'fixed_version' : '7.50.20.489945', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.21', 'fixed_version' : '7.50.21.489944', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.22', 'fixed_version' : '7.50.22.489943', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.23', 'fixed_version' : '7.50.23.489942', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.24', 'fixed_version' : '7.50.24.489941', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.25', 'fixed_version' : '7.50.25.489940', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.26', 'fixed_version' : '7.50.26.489903', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.27', 'fixed_version' : '7.50.27.489901', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.28', 'fixed_version' : '7.50.28.489881', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.29', 'fixed_version' : '7.50.29.489880', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.30', 'fixed_version' : '7.50.30.489879', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.31', 'fixed_version' : '7.50.31.489878', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.32', 'fixed_version' : '7.50.32.489877', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.33', 'fixed_version' : '7.50.33.489876', 'fixed_display':'See Advisory'},
  {'min_version' : '7.50.34', 'fixed_version' : '7.50.34.489875', 'fixed_display':'See Advisory'}
];

vcf::check_version_and_report(
  app_info:app_info,
  constraints:constraints,
  severity:SECURITY_HOLE
);