high7.5
CVE-2020-6304
Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRN…
Impact
Improper input validation in SAP NetWeaver Internet Communication Manager (update provided in KRNL32NUC & KRNL32UC 7.21, 7.21EXT, 7.22, 7.22EXT KRNL64NUC & KRNL64UC 7.21, 7.21EXT, 7.22, 7.22EXT, 7.49 KERNEL 7.21, 7.49, 7.53) allows an attacker to prevent users from accessing its services through a denial of service.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Sap | Netweaver Internet Communication Manager \(Kernel\) | Versions 7.21, 7.22, 7.49, 7.53 |
| Sap | Netweaver Internet Communication Manager \(Krnl32nuc\) | Versions 7.21, 7.21ext, 7.22, 7.22ext |
| Sap | Netweaver Internet Communication Manager \(Krnl32uc\) | Versions 7.21, 7.21ext, 7.22, 7.22ext |
| Sap | Netweaver Internet Communication Manager \(Krnl64nuc\) | Versions 7.21, 7.21ext, 7.22, 7.22ext, 7.49 |
| Sap | Netweaver Internet Communication Manager \(Krnl64uc\) | Versions 7.21, 7.21ext, 7.22, 7.22ext, 7.49 |