CVE-2023-37491

Summary

CVE-2023-37491 is a vulnerability affecting various versions of SAP Message Server, including KERNEL 7.22, KERNEL 7.53, KERNEL 7.54, KERNEL 7.77, RNL64UC 7.22, RNL64UC 7.22EXT, RNL64UC 7.53, KRNL64NUC 7.22, and KRNL64NUC 7.22EXT. An authenticated attacker can exploit this issue by bypassing the Access Control List (ACL), allowing unauthorized access to the network of the affected SAP systems. The consequences of this vulnerability include unauthorized read and write access to data and potential system unavailability.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.