CVE-2023-29186
Published: 11 April 2023
Summary
CVE-2023-29186 is a high-severity Path Traversal (CWE-22) vulnerability in Sap Netweaver. Its CVSS base score is 8.7 (High).
Operationally, ranked in the top 26.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.
Deeper analysis
CVE-2023-29186 is a directory traversal vulnerability, tracked under CWE-22, that affects SAP NetWeaver BI CONT ADDON versions 707, 737, 747, and 757. The flaw resides in a report that permits an attacker to upload and overwrite arbitrary files on the underlying SAP server without the ability to read data.
A remote attacker who already possesses administrative privileges can exploit the issue over the network to overwrite critical operating-system files, resulting in denial of service and system unavailability. The CVSS 3.1 score of 8.7 reflects the combination of network attack vector, low attack complexity, high privileges required, and impacts to integrity and availability with changed scope.
SAP security notes 3305907 and the associated support documents provide the official patches and mitigation guidance for the affected releases.
The EPSS score for this CVE rose from a low baseline to a peak of 0.2849 before receding to its current value of 0.0075, indicating a period of increased exploitation interest after disclosure.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2023-32787
Vulnerability details
In SAP NetWeaver (BI CONT ADDON) - versions 707, 737, 747, 757, an attacker can exploit a directory traversal flaw in a report to upload and overwrite files on the SAP server. Data cannot be read but if a remote…
more
attacker has sufficient (administrative) privileges then potentially critical OS files can be overwritten making the system unavailable.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.
Validates pathnames and filenames to prevent traversal outside intended directories.