Log in Start free

Vulnerability · Published Mar 14, 2023 · Assigned by sap

CVE-2023-27498Memory Corruption vulnerability in SAP Host Agent (SAPOSCOL)

High 7.2

In plain English

A high-severity stack buffer overflow in Host Agent (SAPOSCOL) from SAP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 46% of all known vulnerabilities).

Severity (CVSS 3.1)7.2High
Exploit odds (30 days)0.5%top 54.1% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be used to reveal but not modify any technical information about the server. It can also make a particular service temporarily unavailable

Affected products (as reported)

VendorProductVersions
SAP Host Agent (SAPOSCOL) 7.22

Weakness: CWE-121 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:L

References