launchpad.support.sap.com
https://launchpad.support.sap.com/ CVE-2021-33690
CRITICALNuclei
SAP NetWeaver Server-Side Request Forgery (SSRF)
Record summary
CVE-2021-33690 has a selected CVSS score of 9.9 (critical); EIP currently links 1 repository PoC and 1 Nuclei template.
Description
Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the server to perform proxy attacks on server by sending crafted queries. Due to this, the threat actor could completely compromise sensitive data residing on the Server and impact its availability.Note: The impact of this vulnerability depends on whether SAP NetWeaver Development Infrastructure (NWDI) runs on the intranet or internet. The CVSS score reflects the impact considering the worst-case scenario that it runs on the internet.
Description source: CVE List
Exploitation context
Affected products and versions
2| Product | Source | Version range | Status |
|---|---|---|---|
NetWeaverBrowse SAP / NetWeaver | VulnCheck | Version data not supplied | |
SAP NetWeaver Development Infrastructure (Component Build Service)Browse SAP SE / SAP NetWeaver Development Infrastructure (Component Build Service) | CVE List | < 7.11 | affected |
| < 7.20 | affected | ||
| < 7.30 | affected | ||
| < 7.31 | affected | ||
| < 7.40 | affected | ||
| < 7.50 | affected | ||
Proofs of concept
1Repository PoCs
GitHubredrays-io/CVE-2021-33690Repository PoCby redrays-ioStars: 0Not analyzed1 file
Nuclei templates
1ProjectDiscoveryCRITICALSAP NetWeaver Development Infrastructure - Server Side Request ForgeryCVSS 9.9
Server-Side Request Forgery (SSRF) vulnerability has been detected in the SAP NetWeaver Development Infrastructure Component Build Service versions - 7.11, 7.20, 7.30, 7.31, 7.40, 7.50The SAP NetWeaver Development Infrastructure Component Build Service allows a threat actor who has access to the server to perform proxy attacks on server by sending crafted queries. Due to this, the threat actor could completely compromise sensitive data residing on the Server and impact its availability.Note: The impact of this vulnerability depends on whether SAP NetWeaver Development Infrastructure (NWDI) runs on the intranet or internet. The CVSS score reflects the impact considering the worst-case scenario that it runs on the internet.
Impact
Authenticated attackers can perform SSRF attacks to manipulate internal network resources, potentially accessing sensitive internal systems and data.
Remediation
Apply the latest firmware update provided by the vendor to mitigate this vulnerability.
WeaknessesCWE-918
AuthorsDhiyaneshDK
Template tagscve2021cveoastssrfsapvkevvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CPE: cpe:2.3:a:sap:netweaver_development_infrastructure:7.11:*:*:*:*:*:*:*
Shodan: html:"SAP NetWeaver"
Shodan: http.html:"sap netweaver"
FOFA: body="sap netweaver"
https://redrays.io/cve-2021-33690-server-side-request-forgery-vulnerability/ https://nvd.nist.gov/vuln/detail/CVE-2021-33690 https://launchpad.support.sap.com/#/notes/3072955 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806 https://github.com/redrays-io/CVE-2021-33690
Source: ProjectDiscovery
References
3nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2021-33690 wiki.scn.sap.com
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=582222806