4.6
CVSSv2

CVE-2022-29614

Published: 14/06/2022 Updated: 27/10/2022
CVSS v2 Base Score: 4.6 | Impact Score: 6.4 | Exploitability Score: 3.9
CVSS v3 Base Score: 5 | Impact Score: 4.7 | Exploitability Score: 0.3
VMScore: 409
Vector: AV:L/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SAP startservice - of SAP NetWeaver Application Server ABAP, Application Server Java, ABAP Platform and HANA Database - versions KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, 7.87, 7.88, KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, SAPHOSTAGENT 7.22, - on Unix systems, s-bit helper program sapuxuserchk, can be abused physically resulting in a privilege escalation of an attacker leading to low impact on confidentiality and integrity, but a profound impact on availability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sap netweaver abap krnl64nuc_7.22

sap netweaver abap krnl64nuc_7.22ext

sap netweaver abap kernel_7.22

sap netweaver abap kernel_7.49

sap netweaver abap krnl64uc_7.22

sap netweaver abap krnl64uc_7.22ext

sap netweaver abap krnl64uc_7.49

sap netweaver abap krnl64uc_7.53

sap netweaver abap kernel_7.53

sap host agent 7.22

sap netweaver abap kernel_7.77

sap netweaver abap kernel_7.81

sap netweaver abap kernel_7.85

sap netweaver abap kernel_7.86

sap netweaver abap kernel_7.87

sap netweaver abap kernel_7.88

Exploits

SAPControl Web Service Interface (sapstartsrv) suffers from a privilege escalation vulnerability via a race condition ...