CVE-2021-33693: Code Injection

Published Sep 15, 2021

Updated

SAP Cloud Connector, version - 2.0, allows an authenticated administrator to modify a configuration file to inject malicious codes that could potentially lead to OS command execution.

Affected Software

1 affected component

SAP Cloud Connector=2.0

Remediation

Patch Available

https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806

Event History

Sep 15, 2021

CVE Published

via MITRE·06:01 PM

Data Sourced

via MITRE·06:01 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2021-33693?

CVE-2021-33693 is classified as a high severity vulnerability due to its potential for OS command execution.

How do I fix CVE-2021-33693?

To fix CVE-2021-33693, update SAP Cloud Connector to the latest version that addresses this vulnerability.

Who is affected by CVE-2021-33693?

CVE-2021-33693 affects SAP Cloud Connector version 2.0 that has an authenticated administrator capable of modifying configuration files.

What impact does CVE-2021-33693 have on systems?

CVE-2021-33693 allows for the injection of malicious code that could lead to OS command execution, compromising system integrity.

Is there a workaround for CVE-2021-33693?

Currently, there are no documented workarounds for CVE-2021-33693 other than upgrading to a patched version.