CVE-2021-33663

State
Published
Severity
5.8 Medium
Published
Jun 9, 2021
Updated
Aug 3, 2024
Reserved
May 28, 2021

Read the record on cve.org

Description

SAP NetWeaver AS ABAP, versions - KRNL32NUC - 7.22,7.22EXT, KRNL32UC - 7.22,7.22EXT, KRNL64NUC - 7.22,7.22EXT,7.49, KRNL64UC - 8.04,7.22,7.22EXT,7.49,7.53,7.73, KERNEL - 7.22,8.04,7.49,7.53,7.73,7.77,7.81,7.82,7.83,7.84, allows an unauthorized attacker to insert cleartext commands due to improper restriction of I/O buffering into encrypted SMTP sessions over the network which can partially impact the integrity of the application.

Scores

CVSSScoreVectorSource
3.05.8 MediumCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:L/A:Nsap

Weaknesses

The record names no weakness.

Affected Products

ProductVersions
SAP NetWeaver AS ABAPSAP SE
  • < KRNL32NUC - 7.22Affected
  • < 7.22EXTAffected
  • < KRNL32UC - 7.22Affected
  • < KRNL64NUC - 7.22Affected
  • < 7.49Affected
  • < KRNL64UC - 8.04Affected
  • < 7.22Affected
  • < 7.53Affected
  • < 7.73Affected
  • < KERNEL - 7.22Affected
  • < 8.04Affected
  • < 7.77Affected
  • < 7.81Affected
  • < 7.82Affected
  • < 7.83Affected
  • < 7.84Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.