CVE-2023-40308

Published: Sep 12, 2023Modified: Nov 21, 2024

7.5

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Exploitability: 3.9 / Impact: 3.6

Source: NVD

Description

SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component to crash making it unavailable. There is no ability to view or modify any information.

Affected (47)

Products: Sap: Commoncryptolib, Content Server, Extended Application Services And Runtime, Hana Database, Host Agent, Netweaver Application Server Abap, Netweaver Application Server Java, Sapssoext, Web Dispatcher

Sap

9 products

Commoncryptolib

Content Server

Extended Application Services And Runtime

Hana Database

Host Agent

Netweaver Application Server Abap

Netweaver Application Server Java

Sapssoext

Web Dispatcher

Configuration A

47 vulnerable

Vulnerable Software	Affected Versions
Sap Commoncryptolib	Version 8.0.0
Sap Content Server	Version 6.50
Sap Content Server	Version 7.53
Sap Content Server	Version 7.54
Sap Extended Application Services And Runtime	Version 1.0
Sap Hana Database	Version 2.0
Sap Host Agent	Version 722
Sap Netweaver Application Server Abap	Version 7.22ext
Sap Netweaver Application Server Abap	Version kernel64nuc_7.22
Sap Netweaver Application Server Abap	Version kernel64nuc_7.22ext
Sap Netweaver Application Server Abap	Version kernel64uc_7.22
Sap Netweaver Application Server Abap	Version kernel64uc_7.22ext
Sap Netweaver Application Server Abap	Version kernel64uc_7.53
Sap Netweaver Application Server Abap	Version kernel64uc_8.04
Sap Netweaver Application Server Abap	Version kernel_7.22
Sap Netweaver Application Server Abap	Version kernel_7.53
Sap Netweaver Application Server Abap	Version kernel_7.54
Sap Netweaver Application Server Abap	Version kernel_7.77
Sap Netweaver Application Server Abap	Version kernel_7.85
Sap Netweaver Application Server Abap	Version kernel_7.89
Sap Netweaver Application Server Abap	Version kernel_7.91
Sap Netweaver Application Server Abap	Version kernel_7.92
Sap Netweaver Application Server Abap	Version kernel_7.93
Sap Netweaver Application Server Abap	Version kernel_8.04
Sap Netweaver Application Server Java	Version kernel64nuc_7.22
Sap Netweaver Application Server Java	Version kernel64nuc_7.22ext
Sap Netweaver Application Server Java	Version kernel64uc_7.22
Sap Netweaver Application Server Java	Version kernel64uc_7.22ext
Sap Netweaver Application Server Java	Version kernel64uc_7.53
Sap Netweaver Application Server Java	Version kernel64uc_8.04
Sap Netweaver Application Server Java	Version kernel_7.22
Sap Netweaver Application Server Java	Version kernel_7.53
Sap Netweaver Application Server Java	Version kernel_7.54
Sap Netweaver Application Server Java	Version kernel_7.77
Sap Netweaver Application Server Java	Version kernel_7.85
Sap Netweaver Application Server Java	Version kernel_7.89
Sap Netweaver Application Server Java	Version kernel_7.91
Sap Netweaver Application Server Java	Version kernel_7.92
Sap Netweaver Application Server Java	Version kernel_7.93
Sap Netweaver Application Server Java	Version kernel_8.04
Sap Sapssoext	Version 17.0
Sap Web Dispatcher	Version 7.22ext
Sap Web Dispatcher	Version 7.53
Sap Web Dispatcher	Version 7.54
Sap Web Dispatcher	Version 7.77
Sap Web Dispatcher	Version 7.85
Sap Web Dispatcher	Version 7.89