Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2022-28772

By overlong input values an attacker may force overwrite of the internal program stack in SAP Web Dispatcher - versions 7.53, 7.77, 7.81, 7.85, 7.86, or Internet Communication Manager - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, 7.77, 7.81, 7.85, 7.86, which makes these programs unavailable, leading to denial of service.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.011
EPSS Ranking 77.3%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
Products affected by CVE-2022-28772
  • Sap » Netweaver » Version: 7.22ext
    cpe:2.3:a:sap:netweaver:7.22ext
  • Sap » Netweaver » Version: 7.49
    cpe:2.3:a:sap:netweaver:7.49
  • Sap » Netweaver » Version: 7.53
    cpe:2.3:a:sap:netweaver:7.53
  • Sap » Netweaver » Version: 7.77
    cpe:2.3:a:sap:netweaver:7.77
  • Sap » Netweaver » Version: 7.81
    cpe:2.3:a:sap:netweaver:7.81
  • Sap » Netweaver » Version: 7.85
    cpe:2.3:a:sap:netweaver:7.85
  • Sap » Netweaver » Version: 7.86
    cpe:2.3:a:sap:netweaver:7.86
  • Sap » Netweaver » Version: kernel_7.22
    cpe:2.3:a:sap:netweaver:kernel_7.22
  • Sap » Netweaver » Version: krnl64nuc_7.22
    cpe:2.3:a:sap:netweaver:krnl64nuc_7.22
  • Sap » Netweaver » Version: krnl64uc_7.22
    cpe:2.3:a:sap:netweaver:krnl64uc_7.22
  • Sap » Web Dispatcher » Version: 7.53
    cpe:2.3:a:sap:web_dispatcher:7.53
  • Sap » Web Dispatcher » Version: 7.77
    cpe:2.3:a:sap:web_dispatcher:7.77
  • Sap » Web Dispatcher » Version: 7.81
    cpe:2.3:a:sap:web_dispatcher:7.81
  • Sap » Web Dispatcher » Version: 7.85
    cpe:2.3:a:sap:web_dispatcher:7.85
  • Sap » Web Dispatcher » Version: 7.86
    cpe:2.3:a:sap:web_dispatcher:7.86


Products
Pricing
Contact Us

Shodan ® - All rights reserved