CVE-2021-27624mediumCWE-787

CVE-2021-27624: medium-severity vulnerability in SAP Internet Graphics Service

Published · Updated

Follow this CVE+ Monitor SAP Internet Graphics Service

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5.9epss 1.2%
SAP Internet Graphics Service, versions - 7.20,7.20EXT,7.53,7.20_EX2,7.81, allows an unauthenticated attacker after retrieving an existing system state value can submit a malicious IGS request over a network which due to insufficient input validation in method CiXMLIStreamRawBuffer::readRaw () which will trigger an internal memory corruption error in the system causing the system to crash and rendering it unavailable. In this attack, no data in the system can be viewed or modified.
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected products
SAP SE · SAP Internet Graphics Service
Related CVEs — SAP Internet Graphics Service

In the same product, most dangerous first.

CVE-2021-27622MEDIUMCVE-2021-27622EPSS 1.2%CVE-2021-27627MEDIUMCVE-2021-27627EPSS 1.2%CVE-2021-27625MEDIUMCVE-2021-27625EPSS 1.2%CVE-2021-27620MEDIUMCVE-2021-27620EPSS 1.2%CVE-2021-27626MEDIUMCVE-2021-27626EPSS 1.2%CVE-2021-27623MEDIUMCVE-2021-27623EPSS 0.9%