PT-2017-14526 · Sap · Sap Plant Connectivity

Publicado 2017-12-12 · Atualizado 2017-12-29 · CVE-2017-16690

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP Plant Connectivity versions 2.3 and 15.0

Description A malicious DLL preload attack is possible due to the way system DLLs are loaded by the NwSapSetup and Installation self-extracting program. Specifically, the program loads system DLLs like DWMAPI.dll from the folder the executable is in, rather than from the system location. This allows an attacker to load a malicious DLL with the same name as a system DLL, potentially executing arbitrary code.

Recommendations For SAP Plant Connectivity version 2.3, ensure that system DLLs are only loaded from the system folders to prevent malicious DLL preload attacks. For SAP Plant Connectivity version 15.0, consider restricting access to the NwSapSetup.exe executable until a fix is available, and ensure that system DLLs are only loaded from the system folders.

Correção

Untrusted Search Path

Enumeração de Fraquezas

CWE-426

Identificadores relacionados

CVE-2017-16690

Produtos afetados

Sap Plant Connectivity

Referências · 5

• https://blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017 · Aviso do Fabricante
• https://launchpad.support.sap.com/#/notes/2529480 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-16690 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-16690 · Aviso do Fabricante
• http://securityfocus.com/bid/102145 · Nota