SAP SE SAP Kernel (KRNL32NUC)
At a glance
- Source
- NVD
- EPSS
- EPSS 1.41 % · percentile 73 ()
- State
- PUBLISHED
- Published
- Updated
- Assigner
- sap
- NVD status
- Modified
Description
SAP Kernel (RFC), KRNL32NUC, KRNL32UC and KRNL64NUC before versions 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64UC, before versions 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73 and KERNEL before versions 7.21, 7.49, 7.53, 7.73, 7.76 SAP GUI for Windows (BC-FES-GUI) before versions 7.5, 7.6, and SAP GUI for Java (BC-FES-JAV) before version 7.5, allow an attacker to prevent legitimate users from accessing a service, either by crashing or flooding the service.
References
Scores
| Version | Score | Vector | Scored by |
|---|---|---|---|
| CVSS 3.1 | HIGH 7.5 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | NVD · nvd@nist.gov (Primary) |
| CVSS 2.0 | HIGH 7.8 | AV:N/AC:L/Au:N/C:N/I:N/A:C | NVD · nvd@nist.gov (Primary) |
European references
- ENISA EUVD · EUVD-2019-1138
- GCVE · GCVE-0-2019-0365
CERT-FR advisories
- CERTFR-2019-AVI-514 — Multiples vulnérabilités dans plusieurs produits SAP · cert.ssi.gouv.fr
Affected configurations (NVD CPE)
cpe:2.3:a:sap:sap_kernel:7.21:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel:7.49:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel:7.53:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel:7.73:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel:7.76:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.21:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.21ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.22:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32nuc:7.22ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32uc:7.21:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32uc:7.21ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32uc:7.22:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl32uc:7.22ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.21:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.21ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.22:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64nuc:7.22ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.21:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.21ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.22:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.22ext:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.49:*:*:*:*:*:*:*cpe:2.3:a:sap:sap_kernel_krnl64uc:7.73:*:*:*:*:*:*:*
Affected products
| Product | Versions |
|---|---|
| SAP SE · SAP Kernel (KRNL32NUC) | affected < 7.21 ; affected < 7.21EXT ; affected < 7.22 ; affected < 7.22EXT |
| SAP SE · SAP Kernel (KRNL32UC) | affected < 7.21 ; affected < 7.21EXT ; affected < 7.22 ; affected < 7.22EXT |
| SAP SE · SAP Kernel (KRNL64NUC) | affected < 7.21 ; affected < 7.21EXT ; affected < 7.22 ; affected < 7.22EXT ; affected < 7.49 |
| SAP SE · SAP Kernel (KRNL64UC) | affected < 7.21 ; affected < 7.21EXT ; affected < 7.22 ; affected < 7.22EXT ; affected < 7.49 ; affected < 7.73 |
| SAP SE · SAP Kernel (KERNEL) | affected < 7.21 ; affected < 7.49 ; affected < 7.53 ; affected < 7.73 ; affected < 7.76 |
| SAP SE · SAP GUI for Windows (BC-FES-GUI) | affected < 7.5 ; affected < 7.6 |
| SAP SE · SAP GUI for Java (BC-FES-JAV) | affected < 7.5 |
Sources
| Source | Licence |
|---|---|
| CVE List (CVEProject cvelistV5) | CVE Program Terms of Use |
| EPSS (FIRST.org) | FIRST — attribution requested |
| ENISA EUVD | ENISA — reproduction authorised, source acknowledged |
| CERT-FR (ANSSI) | Licence Ouverte / Etalab 2.0 |
| NVD (NIST) via fkie-cad/nvd-json-data-feeds | Public domain — this product uses data from the NVD API but is not endorsed or certified by the NVD |