CVE-2024-30218
Raw vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.
Summary
CVE-2024-30218 is a medium-severity Multiple Binds to the Same Port (CWE-605) vulnerability in Sap (inferred from references). Its CVSS base score is 6.5 (Medium).
Operationally, exploitation aligns with the MITRE ATT&CK technique Adversary-in-the-Middle (T1557); ranked at the 42th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.
The strongest mitigations our analysis identified map to CM-6 (Configuration Settings) and AC-4 (Information Flow Enforcement) — see the control section below for these in your framework.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2024-28149
Vulnerability Data
The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability.
- CWE(s)
Related Threats
MITRE ATT&CK Enterprise Techniques
CVEs Like This One
Affected Assets
Mitigating Controls
Mitigating Controls (NIST 800-53 r5) AI
Configuration settings can mandate exclusive-address-use options or firewall rules that disallow multiple binds to the same port.
Information flow enforcement can restrict which processes are authorized to bind to a given port, preventing port stealing.
Boundary protection at managed interfaces can enforce exclusive port binding and block unauthorized services from claiming the same port.
Mitigating Controls (NIST CSF 2.0) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.
Protecting networks from unauthorized logical access directly prevents illicit port binding or service theft.
Documenting authorized flows helps identify expected port usage but does not prevent unauthorized binds.
Hardened configuration baselines can enforce exclusive port binding and disable reuse options.
Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI
Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.
Configuration management can enforce and audit port-binding settings across systems.
Network security controls can enforce exclusive port binding and service registration policies.
Security of network services includes configuration to prevent unauthorized services from binding to privileged ports.
Secure system architecture principles require unique service endpoints and prevent port collisions by design.
Secure coding practices can include checks to ensure sockets request exclusive port binding.