Cyber Resilience

CVE-2024-30218

Published
09 April 2024
Modified
17 June 2026
CVSS Score v3.1 6.5
Click a component to see what it means
Raw vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0053 42th percentile
Risk Priority 51 floored blend · peak EPSS

CVSS and EPSS are reproduced from their sources (NVD, FIRST EPSS). Risk Priority is our own derived reading, not an NVD score.

Summary

CVE-2024-30218 is a medium-severity Multiple Binds to the Same Port (CWE-605) vulnerability in Sap (inferred from references). Its CVSS base score is 6.5 (Medium).

Operationally, exploitation aligns with the MITRE ATT&CK technique Adversary-in-the-Middle (T1557); ranked at the 42th percentile by exploit likelihood (below the median); it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified map to CM-6 (Configuration Settings) and AC-4 (Information Flow Enforcement) — see the control section below for these in your framework.

EU & UK References

Vulnerability Data

The ABAP Application Server of SAP NetWeaver as well as ABAP Platform allows an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service. This leads to a considerable impact on availability.

CWE(s)

Related Threats

MITRE ATT&CK Enterprise Techniques

T1557 Adversary-in-the-Middle Credential Access
Adversaries may attempt to position themselves between two or more networked devices using an adversary-in-the-middle (AiTM) technique to support follow-on behaviors such as [Network Sniffing](https://attack.
Derived from this CVE’s CWE(s) via the direct CWE→ATT&CK cross-walk.

CVEs Like This One

CVE-2026-25086Shared CWE-605

Affected Assets

Sap
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

Configuration settings can mandate exclusive-address-use options or firewall rules that disallow multiple binds to the same port.

Information flow enforcement can restrict which processes are authorized to bind to a given port, preventing port stealing.

Boundary protection at managed interfaces can enforce exclusive port binding and block unauthorized services from claiming the same port.

Mitigating Controls (NIST CSF 2.0) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→CSF cross-walk (authority under review) — links open the control.

PR.IR-01 mostly match
prevents

Protecting networks from unauthorized logical access directly prevents illicit port binding or service theft.

ID.AM-03 partial match
prevents

Documenting authorized flows helps identify expected port usage but does not prevent unauthorized binds.

PR.PS-01 partial match
prevents

Hardened configuration baselines can enforce exclusive port binding and disable reuse options.

Mitigating Controls (ISO/IEC 27001:2022 Annex A) AI

Derived directly from the weakness types (CWEs) cited in the NVD entry via our AI-authored CWE→ISO cross-walk (authority under review) — links open the control.

prevents

Configuration management can enforce and audit port-binding settings across systems.

mitigates

Network security controls can enforce exclusive port binding and service registration policies.

mitigates

Security of network services includes configuration to prevent unauthorized services from binding to privileged ports.

prevents

Secure system architecture principles require unique service endpoints and prevent port collisions by design.

prevents

Secure coding practices can include checks to ensure sockets request exclusive port binding.

References