CVE-2021-33672

Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient's scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability.

CVSS v3 9.6 CRITICAL
CVSS v2.0 9.3 HIGH

9.6^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://launchpad.support.sap.com/#/notes/3073891	Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:contact_center:700:*:*:*:*:*:*:*

History

No history.

Information

Published : 2021-09-14 12:15

Updated : 2024-02-28 18:48

NVD link : CVE-2021-33672

Mitre link : CVE-2021-33672

CVE.ORG link : CVE-2021-33672

JSON object : View

Products Affected

sap

contact_center

CWE

CWE-116

Improper Encoding or Escaping of Output

{"id": "CVE-2021-33672", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Secondary", "source": "cna@sap.com", "cvssData": {"scope": "CHANGED", "version": "3.0", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:L", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}]}, "published": "2021-09-14T12:15:08.793", "references": [{"url": "https://launchpad.support.sap.com/#/notes/3073891", "tags": ["Permissions Required"], "source": "cna@sap.com"}, {"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405", "tags": ["Vendor Advisory"], "source": "cna@sap.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-116"}]}], "descriptions": [{"lang": "en", "value": "Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient's scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability."}, {"lang": "es", "value": "Debido a una falta de codificaci\u00f3n en SAP Contact Center's Communication Desktop component - versi\u00f3n 700, un atacante podr\u00eda enviar un script malicioso en un mensaje de chat. Cuando el mensaje es aceptado por el destinatario del chat, el script se ejecuta en su \u00e1mbito. Debido al uso de ActiveX en la aplicaci\u00f3n, el atacante puede ejecutar comandos a nivel del sistema operativo en el \u00e1mbito del destinatario del chat. Esto podr\u00eda conllevar a un compromiso completo de su confidencialidad, integridad y podr\u00eda afectar temporalmente a su disponibilidad"}], "lastModified": "2021-09-24T14:55:22.347", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:contact_center:700:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "9C0915D4-88B8-45A9-BA9A-B7B7BDD3FC55"}], "operator": "OR"}]}], "sourceIdentifier": "cna@sap.com"}