SAP Router vulnerabilities

2 CVEs affecting SAP Router, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-27668, published 2022-06-14.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2014-0984, published 2014-04-17. Medium severity, CVSS 4.3. EPSS: 2.7% chance of exploitation in the next 30 days. The passwordCheck function in SAP Router 721 patch 117, 720 patch 411, 710 patch 029, and earlier terminates validation of a Route Permission Table entry password upon encountering the first…
• CVE-2022-27668, published 2022-06-14. Critical severity, CVSS 9.8. EPSS: 2.2% chance of exploitation in the next 30 days. Depending on the configuration of the route permission table in file 'saprouttab', it is possible for an unauthenticated attacker to execute SAProuter administration commands in SAP NetWeaver and…