Input Validation Flaw in SAP NetWeaver ABAP Server and ABAP Platform

CVE-2021-27629

Summary

SAP NetWeaver ABAP Server and ABAP Platform have a critical input validation error in the Enqueue Server that allows unauthenticated attackers to exploit the system. By sending a specially crafted packet over the network, an attacker can induce an internal error by invoking the method EncPSetUnsupported(). This flaw leads to a system crash, making the server inaccessible. Importantly, no data within the system can be accessed or altered during this vulnerability, thereby emphasizing the urgent need for patching affected versions to uphold system integrity.

References