CVE-2020-6244: High severity sap business client vulnerability

Published May 12, 2020

Updated

SAP Business Client, version 7.0, allows an attacker after a successful social engineering attack to inject malicious code as a DLL file in untrusted directories that can be executed by the application, due to uncontrolled search path element. An attacker could thereby control the behavior of the application.

Affected Software

52 affected components

SAP Business Client=7.0

SAP Business Client=6.0

SAP Business Client=6.0-patch_level1

SAP Business Client=6.0-patch_level10

SAP Business Client=6.0-patch_level11

SAP Business Client=6.0-patch_level12

SAP Business Client=6.0-patch_level13

SAP Business Client=6.0-patch_level14

SAP Business Client=6.0-patch_level15

SAP Business Client=6.0-patch_level16

SAP Business Client=6.0-patch_level17

SAP Business Client=6.0-patch_level2

SAP Business Client=6.0-patch_level3

SAP Business Client=6.0-patch_level4

SAP Business Client=6.0-patch_level5

SAP Business Client=6.0-patch_level6

SAP Business Client=6.0-patch_level7

SAP Business Client=6.0-patch_level8

SAP Business Client=6.0-patch_level9

SAP Business Client=6.5

SAP Business Client=6.5-patch_level1

SAP Business Client=6.5-patch_level10

SAP Business Client=6.5-patch_level11

SAP Business Client=6.5-patch_level12

SAP Business Client=6.5-patch_level13

SAP Business Client=6.5-patch_level14

SAP Business Client=6.5-patch_level15

SAP Business Client=6.5-patch_level16

SAP Business Client=6.5-patch_level17

SAP Business Client=6.5-patch_level18

SAP Business Client=6.5-patch_level19

SAP Business Client=6.5-patch_level2

SAP Business Client=6.5-patch_level20

SAP Business Client=6.5-patch_level21

SAP Business Client=6.5-patch_level22

SAP Business Client=6.5-patch_level3

SAP Business Client=6.5-patch_level4

SAP Business Client=6.5-patch_level5

SAP Business Client=6.5-patch_level6

SAP Business Client=6.5-patch_level7

SAP Business Client=6.5-patch_level8

SAP Business Client=6.5-patch_level9

SAP Business Client=7.0

SAP Business Client=7.0-patch_level1

SAP Business Client=7.0-patch_level2

SAP Business Client=7.0-patch_level3

SAP Business Client=7.0-patch_level4

SAP Business Client=7.0-patch_level5

SAP Business Client=7.0-patch_level6

SAP Business Client=7.0-patch_level7

SAP Business Client=7.0-patch_level8

SAP Business Client=7.0-patch_level9

Event History

May 12, 2020

CVE Published

via MITRE·05:54 PM

Data Sourced

via MITRE·05:54 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2020-6244?

CVE-2020-6244 has a medium severity rating due to the potential for code execution through DLL injection.

How do I fix CVE-2020-6244?

To remediate CVE-2020-6244, ensure that SAP Business Client is updated to a version that addresses this vulnerability.

What versions of SAP Business Client are affected by CVE-2020-6244?

CVE-2020-6244 specifically affects SAP Business Client version 7.0.

What type of attack exploits CVE-2020-6244?

CVE-2020-6244 can be exploited through a social engineering attack that allows for DLL file injection.

What impact does CVE-2020-6244 have on users?

If exploited, CVE-2020-6244 can allow attackers to execute arbitrary code, potentially compromising user data and application integrity.