PT-2016-7329 · Sap · Sap Netweaver

Pablo Artuso · Published 2016-10-05 · Updated 2016-11-28 · CVE-2016-7435

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SAP Netweaver version 7.40 SP 12

Description The issue allows remote authenticated users with certain permissions to execute arbitrary commands. This is achieved through vectors involving a CALL 'SYSTEM' statement in the SCTC subpackage, specifically in the (1) SCTC REFRESH EXPORT TAB COMP, (2) SCTC REFRESH CHECK ENV, and (3) SCTC TMS MAINTAIN ALOG functions.

Recommendations For SAP Netweaver version 7.40 SP 12, consider restricting access to the SCTC subpackage functions, specifically SCTC REFRESH EXPORT TAB COMP, SCTC REFRESH CHECK ENV, and SCTC TMS MAINTAIN ALOG, to minimize the risk of exploitation. As a temporary workaround, consider disabling the CALL 'SYSTEM' statement in these functions until a patch is available.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2016-7435

Affected Products

Sap Netweaver

References · 10

• https://nvd.nist.gov/vuln/detail/CVE-2016-7435 · Security Note
• https://osv.dev/vulnerability/CVE-2016-7435 · Vendor Advisory
• https://onapsis.com/research/security-advisories/sap-os-command-injection-sctcrefreshcheckenv · Note
• http://seclists.org/fulldisclosure/2016/Oct/1 · Note
• http://securityfocus.com/bid/93272 · Note
• https://onapsis.com/blog/analyzing-sap-security-notes-march-2016 · Note
• http://seclists.org/fulldisclosure/2016/Oct/2 · Note
• https://onapsis.com/research/security-advisories/sap-os-command-injection-sctcrefreshexporttabcomp · Note
• https://onapsis.com/research/security-advisories/sap-os-command-injection-sctctmsmaintainalog · Note
• http://seclists.org/fulldisclosure/2016/Oct/0 · Note