6.6med
CVE-2018-2380KEV · ransomwarein critical feed1 exploit
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, th…
Published 8 y ago · modified 4 mo ago · JSON
CVSS
6.6
v3.1 · CNA
CISA KEV
Yes
added 2021-11-03
EPSS
28.9%
percentile 98%
Public exploits
1
Exploit-DB
Summary
SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters representing "traverse to parent directory" are passed through to the file APIs.
Known exploited (CISA KEV)
- Added
- 5 y ago
- Due date
- 2022-05-03 (4 y ago)
- Ransomware use
- Known to be used in ransomware campaigns
- Required action
- Apply updates per vendor instructions.
- Vendor / product
- SAP / Customer Relationship Management (CRM)
- CISA name
- SAP Customer Relationship Management (CRM) Path Traversal Vulnerability
CISA SSVC assessment
- Exploitation
- Active — exploited in the wild
- Automatable
- no
- Technical impact
- partial
- Assessed
- 21 mo ago
Exploit prediction (EPSS)
28.93% probability of exploitation in the next 30 days, higher than 98% of all scored CVEs.
Exploits and detections
- EDB-44292 SAP NetWeaver AS JAVA CRM - Log injection Remote Command Execution · remote · 2018-03-14
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| CISA ADP | 3.1 | 6.6 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L |
| NVD | 3.1 | 6.6 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L |
| CNA | 3.1 | 6.6 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L |
| NVD | 2.0 | 6.5 | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Affected products
- SAP SE SAP CRM
Classification
- Weakness
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory
References
- github.com /erpscanteam/CVE-2018-2380 · x_refsource_MISC, x_transferred
- exploit-db.com /exploits/44292/ · exploit, x_refsource_EXPLOIT-DB, x_transferred
- launchpad.support.sap.com /#/notes/2547431 · x_refsource_CONFIRM, x_transferred
- securityfocus.com /bid/103001 · vdb-entry, x_refsource_BID, x_transferred
- blogs.sap.com /2018/02/13/sap-security-patch-day-february-2018/ · x_refsource_CONFIRM, x_transferred
- cisa.gov /known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-2380 · government-resource
Sources
- CVE List: CVE-2018-2380
- NVD: CVE-2018-2380
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.