CVE-2021-27612

Published May 11, 2021

Last updated 3 years ago

Overview

Description: In specific situations SAP GUI for Windows until and including 7.60 PL9, 7.70 PL0, forwards a user to specific malicious website which could contain malware or might lead to phishing attacks to steal credentials of the victim.
Source: cna@sap.com
NVD status: Analyzed

Hype score: Not currently trending

Risk scores

CVSS 3.1

Type: Primary
Base score: 6.1
Impact score: 2.7
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Severity: MEDIUM

CVSS 3.0

Type: Secondary
Base score: 3.4
Impact score: 1.4
Exploitability score: 1.6
Vector string: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:N/A:N
Severity: LOW

CVSS 2.0

Type: Primary
Base score: 5.8
Impact score: 4.9
Exploitability score: 8.6
Vector string: AV:N/AC:M/Au:N/C:P/I:P/A:N

Weaknesses

nvd@nist.gov: CWE-601

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FA071418-F2F0-4530-94C0-94D9295FED83"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:patch_level1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "E27CD53C-8CA1-4204-829D-3343AC4565B4"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:patch_level2:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "1E0246DF-E354-4191-91DA-99880E1BD08A"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:patch_level3:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "140210E1-95C6-4EB5-A854-44E9EA03DD27"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:patch_level4:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "0FD672D2-D67A-4576-8F9B-92177AF51151"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:patch_level5:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "AE686D3C-E814-42D6-9F33-839763B53968"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:patch_level6:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "711DE87F-72AA-4A6F-8F53-18758A195ED3"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:patch_level7:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "8E44C0EE-8ED0-42E8-81FB-7FE7FC9308E7"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:patch_level8:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "98A928B5-F8AA-4CD0-A8A5-D4E04AB3856A"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:patch_level8_hotfix1:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "9415406D-32AF-41EB-A351-2DE0306657DB"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.60:patch_level9:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "C7B83282-AD56-455F-9979-4F4D145F9798"
          },
          {
            "criteria": "cpe:2.3:a:sap:gui_for_windows:7.70:-:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "FE1286F1-B9A5-4F25-B083-272943D90023"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

Overview

Social media

Risk scores

CVSS 3.1

CVSS 3.0

CVSS 2.0

Weaknesses

Configurations

References