PT-2025-32605 · Sap · Sap Gui For Windows

CVE-2025-42943 · Publicado 2025-08-12 · Atualizado 2025-08-12

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions: SAP GUI for Windows (affected versions not specified)

Description: SAP GUI for Windows may allow the leak of NTML hashes when specific ABAP frontend services are called with UNC paths. A successful attack requires developer authorization in a specific Application Server ABAP to make code changes, and the victim must execute the process using SAP GUI for Windows. This could trigger automatic NTLM authentication, potentially exposing hashed credentials to an attacker, resulting in a high impact on confidentiality.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-250

Identificadores relacionados

BDU:2025-16190

CVE-2025-42943

Produtos afetados

Sap Gui For Windows

Referências · 7

• https://twitter.com/CVEnew/status/1955101089151238628 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2025-16190 · Nota de Segurança
• https://url.sap/sapsecuritypatchday · Nota
• https://t.me/CVEtracker/29731 · Publicação no Telegram
• https://support.sap.com/en/my-support/knowledge-base/security-notes-news/august-2025.html · Nota
• https://me.sap.com/notes/3627845 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-42943 · Nota de Segurança