CVE-2023-33990

CVSS 3.1 Score 7.1 of 10 (high)

Details

Published Jul 11, 2023
Updated: Jul 19, 2023
CWE ID 732

Summary

CVE-2023-33990 is a vulnerability affecting SAP SQL Anywhere version 17.0 on Windows. A low-privileged attacker with access to the local system can write into shared memory objects, leading to a Denial of Service (DoS) attack by crashing the service. Additionally, an attacker may be able to modify sensitive data in these objects. This issue does not impact SAP SQL Anywhere on other platforms.

Ligh bulbPrevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.

Share