CVE-2021-33672

Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient's scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability.

CVSS v3.0 9.6 CRITICAL
CVSS v2.0 9.3 HIGH

9.6^/10

CVSS v3.0 : CRITICAL

Vector :

Exploitability : 2.8 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction REQUIRED

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://launchpad.support.sap.com/#/notes/3073891	Permissions Required
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405	Vendor Advisory

Advertisement

Configurations

Configuration 1 (hide)

cpe:2.3:a:sap:contact_center:700:*:*:*:*:*:*:*

Information

Published : 2021-09-14 05:15

Updated : 2021-09-24 07:55

NVD link : CVE-2021-33672

Mitre link : CVE-2021-33672

JSON object : View

CWE

CWE-116

Improper Encoding or Escaping of Output

Advertisement

Products Affected

sap

contact_center

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "https://launchpad.support.sap.com/#/notes/3073891", "name": "https://launchpad.support.sap.com/#/notes/3073891", "tags": ["Permissions Required"], "refsource": "MISC"}, {"url": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405", "name": "https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=585106405", "tags": ["Vendor Advisory"], "refsource": "MISC"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Due to missing encoding in SAP Contact Center's Communication Desktop component- version 700, an attacker could send malicious script in chat message. When the message is accepted by the chat recipient, the script gets executed in their scope. Due to the usage of ActiveX in the application, the attacker can further execute operating system level commands in the chat recipient's scope. This could lead to a complete compromise of their confidentiality, integrity, and could temporarily impact their availability."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-116"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2021-33672", "ASSIGNER": "cna@sap.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "acInsufInfo": false, "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}, "baseMetricV3": {"cvssV3": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.8}}, "publishedDate": "2021-09-14T12:15Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:sap:contact_center:700:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-09-24T14:55Z"}