CVE-2021-33678: Code Injection
A function module of SAP NetWeaver AS ABAP (Reconciliation Framework), versions - 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75B, 75C, 75D, 75E, 75F, allows a high privileged attacker to inject code that can be executed by the application. An attacker could thereby delete some critical information and could make the SAP system completely unavailable.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-33678?
CVE-2021-33678 is a vulnerability in the SAP NetWeaver AS ABAP (Reconciliation Framework) that allows a high privileged attacker to inject and execute code within the application.
What is the severity of CVE-2021-33678?
The severity of CVE-2021-33678 is high with a CVSS score of 6.5.
Which versions of SAP NetWeaver AS ABAP are affected by CVE-2021-33678?
Versions 700, 701, 702, 710, 711, 730, 731, 740, 750, 751, 752, 75A, 75B, 75C, 75D, 75E, 75F of SAP NetWeaver AS ABAP are affected by CVE-2021-33678.
How can an attacker exploit CVE-2021-33678?
An attacker with high privileges can exploit CVE-2021-33678 by injecting and executing malicious code within the application.
Are there any recommended fixes for CVE-2021-33678?
Refer to the official SAP note 3048657 for recommended fixes and patches to address CVE-2021-33678.