description: FTP Function of SAP NetWeaver AS ABAP Platform, versions- KRNL32NUC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT, KRNL64NUC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49, 7.73, KERNEL 7.21, 7.45, 7.49, 7.53, 7.73, allows an attacker to inject code or specifically manipulated command that can be executed by the application. An attacker could thereby control the behaviour of the application.
problem types: Code Injection
affected:
{
product: SAP NetWeaver AS ABAP Platform(KRNL32NUC)
vendor: SAP SE
versions:
status: affected, version: < 7.21
status: affected, version: < 7.21EXT
status: affected, version: < 7.22
status: affected, version: < 7.22EXT
}
{
product: SAP NetWeaver AS ABAP Platform(KRNL32UC)
vendor: SAP SE
versions:
status: affected, version: < 7.21
status: affected, version: < 7.21EXT
status: affected, version: < 7.22
status: affected, version: < 7.22EXT
}
{
product: SAP NetWeaver AS ABAP Platform(KRNL64NUC)
vendor: SAP SE
versions:
status: affected, version: < 7.21
status: affected, version: < 7.21EXT
status: affected, version: < 7.22
status: affected, version: < 7.22EXT
status: affected, version: < 7.49
}
{
product: SAP NetWeaver AS ABAP Platform(KRNL64UC)
vendor: SAP SE
versions:
status: affected, version: < 7.21
status: affected, version: < 7.21EXT
status: affected, version: < 7.22
status: affected, version: < 7.22EXT
status: affected, version: < 7.49
status: affected, version: < 7.73
}
{
product: SAP NetWeaver AS ABAP Platform(KERNEL)
vendor: SAP SE
versions:
status: affected, version: < 7.21
status: affected, version: < 7.45
status: affected, version: < 7.49
status: affected, version: < 7.53
status: affected, version: < 7.73
}
