CVE-2023-29108
Last modified
CVE-2023-29108 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend applications from unwanted sources. . EPSS estimates a 0.42% chance of exploitation in the next 30 days.
Description
The IP filter in ABAP Platform and SAP Web Dispatcher - versions WEBDISP 7.85, 7.89, KERNEL 7.85, 7.89, 7.91, may be vulnerable by erroneous IP netmask handling. This may enable access to backend applications from unwanted sources.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sap | Abap Platform Kernel | 7.85 |
| Sap | Abap Platform Kernel | 7.89 |
| Sap | Abap Platform Kernel | 7.91 |
| Sap | Web Dispatcher | 7.85 |
| Sap | Web Dispatcher | 7.89 |
References
- https://launchpad.support.sap.com/#/notes/3315312Permissions Required
- https://launchpad.support.sap.com/#/notes/3315312Permissions Required
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2023-29108?
How severe is CVE-2023-29108?
How do I fix CVE-2023-29108?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2023
- CVE-2023-29102Unrestricted Upload of File with Dangerous Type vulnerabilit…7.2
- CVE-2023-29103A vulnerability has been identified in SIMATIC Cloud Connect…4.3
- CVE-2023-29104A vulnerability has been identified in SIMATIC Cloud Connect…7.6
- CVE-2023-29105A vulnerability has been identified in SIMATIC Cloud Connect…7.5
- CVE-2023-29106A vulnerability has been identified in SIMATIC Cloud Connect…7.5
- CVE-2023-29107A vulnerability has been identified in SIMATIC Cloud Connect…5.3
- CVE-2023-29109The SAP Application Interface Framework (Message Dashboard) …4.6
- CVE-2023-2911If the `recursive-clients` quota is reached on a BIND 9 reso…7.5
- CVE-2023-29110The SAP Application Interface (Message Dashboard) - versions…5.4
- CVE-2023-29111The SAP AIF (ODATA service) - versions 755, 756, discloses m…4.3
- CVE-2023-29112The SAP Application Interface (Message Monitoring) - version…5.4
- CVE-2023-29113The MIB3 infotainment unit used in Skoda and Volkswagen vehi…6.3
Are you affected by CVE-2023-29108?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST