PT-2014-3997 · Sap · Saprouter

Fernando Miranda + 1 · Published 2014-04-17 · Updated 2018-10-10 · CVE-2014-0984

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Router versions prior to 721 patch 118 SAP Router versions prior to 720 patch 412 SAP Router versions prior to 710 patch 030

Description The issue allows remote attackers to obtain passwords via a brute-force attack that relies on timing differences in responses to incorrect password guesses, also known as a timing side-channel attack. This occurs because the passwordCheck function terminates validation of a Route Permission Table entry password upon encountering the first incorrect character.

Recommendations For SAP Router version 721 patch 117 and earlier, update to version 721 patch 118 or later. For SAP Router version 720 patch 411 and earlier, update to version 720 patch 412 or later. For SAP Router version 710 patch 029 and earlier, update to version 710 patch 030 or later.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2014-0984

Affected Products

Saprouter

References · 7

• 🔥 http://exploit-db.com/exploits/32919 · Exploit
• 🔥 https://exploit-db.com/exploits/32919 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-0984 · Security Note
• http://scn.sap.com/docs/DOC-8218 · Note
• http://coresecurity.com/advisories/sap-router-password-timing-attack · Note
• https://service.sap.com/sap/support/notes/1986895 · Note
• http://securityfocus.com/archive/1/531854/100/0/threaded · Note