Critical severity9.0NVD Advisory· Published Apr 11, 2023· Updated Jun 17, 2026
CVE-2023-27267
CVE-2023-27267
Description
Due to missing authentication and insufficient input validation, the OSCommand Bridge of SAP Diagnostics Agent - version 720, allows an attacker with deep knowledge of the system to execute scripts on all connected Diagnostics Agents. On successful exploitation, the attacker can completely compromise confidentiality, integrity and availability of the system.
Affected products
3cpe:2.3:a:sap:diagnostics_agent:720:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:diagnostics_agent:720:*:*:*:*:*:*:*
- (no CPE)range: 720
- SAP/Diagnostics Agent (OSCommand Bridge)v5Range: 720
Patches
Vulnerability mechanics
References
2- www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlnvdVendor Advisory
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.