PT-2020-5955 · Sap · Sap Netweaver As Java

Pablo Artuso · Published 2020-07-14 · Updated 2025-10-31 · CVE-2020-6287

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS JAVA (LM Configuration Wizard) versions 7.30 through 7.50

Description: The vulnerability is related to missing authentication for critical functions in the SAP NetWeaver Java Application Server. This issue allows an attacker to execute configuration tasks without prior authentication, potentially compromising the confidentiality, integrity, and availability of the system. The attacker can create an administrative user, leading to a missing authentication check. The vulnerability has been exploited in real-world incidents, with reports of mass scanning for vulnerable servers. Financial institutions, hospitals, and government entities are among the affected industries.

Recommendations: For SAP NetWeaver AS JAVA (LM Configuration Wizard) versions 7.30 through 7.50, apply the patches made available by SAP to fix the missing authentication check. As a temporary workaround, consider restricting access to the LM Configuration Wizard to minimize the risk of exploitation. Avoid using the vulnerable component until a patch is applied.

Exploit

Fix

Improper Authentication

Missing Authentication

Weakness Enumeration

CWE-287

CWE-306

Related Identifiers

BDU:2021-02129

CVE-2020-6287

SAPNETWEAVERCVE2020_6287

Affected Products

Sap Netweaver As Java

References · 36

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/sap/cve_2020_6287_ws_add_user.rb · Exploit
• 🔥 https://github.com/chipik/SAP_RECON · Exploit
• 🔥 https://github.com/duc-nt/CVE-2020-6287-exploit · Exploit
• 🔥 https://github.com/Onapsis/CVE-2020-6287_RECON-scanner · Exploit
• 🔥 https://github.com/murataydemir/CVE-2020-6287 · Exploit
• https://bdu.fstec.ru/vul/2021-02129 · Security Note
• https://osv.dev/vulnerability/CVE-2020-6287 · Vendor Advisory
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=552599675 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/654307 · Security Note
• https://launchpad.support.sap.com/#/notes/2934135 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-6287 · Security Note
• https://twitter.com/onapsis/status/1929948230965502299 · Twitter Post
• https://exploit.in/2020/13386 · Note
• https://cisa.gov/sites/default/files/csv/known_exploited_vulnerabilities.csv · Note
• https://t.me/cvenotify/5005 · Telegram Post