April 18, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – CVE-2021-22749 – ICS: Schneider Electric Modicon X80
June 9, 2021Rewterz Threat Advisory – CVE-2021-33741 – Microsoft Edge privilege escalation
June 9, 2021Rewterz Threat Advisory – CVE-2021-22749 – ICS: Schneider Electric Modicon X80
June 9, 2021Rewterz Threat Advisory – CVE-2021-33741 – Microsoft Edge privilege escalation
June 9, 2021
Severity
High
Analysis Summary
CVE-2021-27610
ABAP server could not correctly identify if communication via RFC or HTTP is between the application servers of the same SAP system or with servers outside the same system a malicious user could abuse stolen credentials for external RFC or HTTP calls, to establish a connection with the affected SAP system, in which a malicious external program would pretend to be an internal caller.
Impact
- Information disclosure
Affected Vendors
SAP
Affected Products
- SAP NetWeaver ABAP Server
Remediation
Refer to SAP advisory for the complete list of affected product and their respective patches
https://support.sap.com/en/my-support/software-downloads.html
