CVE-2023-27498
Published: 14 March 2023
Summary
CVE-2023-27498 is a high-severity Stack-based Buffer Overflow (CWE-121) vulnerability in Sap Host Agent. Its CVSS base score is 7.2 (High).
Operationally, ranked in the top 36.5% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-31261
Vulnerability details
SAP Host Agent (SAPOSCOL) - version 7.22, allows an unauthenticated attacker with network access to a server port assigned to the SAP Start Service to submit a crafted request which results in a memory corruption error. This error can be…
more
used to reveal but not modify any technical information about the server. It can also make a particular service temporarily unavailable
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
No mitigating controls mapped yet. The per-CVE control annotator has not reached this CVE.