CVE-2023-27497criticalCWE-306

CVE-2023-27497: fallo crítico en SAP Diagnostics Agent (EventLogServiceCollector)

Multiple vulnerabilities in SAP Diagnostics Agent (EventLogServiceCollector)

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Diagnostics Agent

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 10epss 0.8%
Due to missing authentication and input sanitization of code the EventLogServiceCollector of SAP Diagnostics Agent - version 720, allows an attacker to execute malicious scripts on all connected Diagnostics Agents running on Windows. On successful exploitation, the attacker can completely compromise confidentiality, integrity and availability of the system.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Productos afectados
SAP · Diagnostics Agent (EventLogServiceCollector)