CVE-2021-27603

Description

An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the Availability of the SAP system.

Risk Information

Base Score

6.5

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS Score

Exploitation Probability

0.448

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 731	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP 740	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver Application Server ABAP	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver and ABAP platform (ST-PI) 740	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver and ABAP platform (ST-PI) 750	Windows
Multiple Vulnerabilities are affected in SAP NetWeaver and ABAP platform (ST-PI) 731	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234