Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2021-27587

When a user opens manipulated Jupiter Tessellation (.JT) format files received from untrusted sources in SAP 3D Visual Enterprise Viewer version 9, the application crashes and becomes temporarily unavailable to the user until restart of the application.

Published

2021-03-09T15:15:16.273

Last Modified

2024-11-21T05:58:14.697

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 7.8 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Access Vector: NETWORK
Access Complexity: MEDIUM
Authentication: NONE
Confidentiality Impact: PARTIAL
Integrity Impact: PARTIAL
Availability Impact: PARTIAL

Exploitability Score

8.6

Impact Score

6.4

Weaknesses

Type: Primary
NVD-CWE-noinfo

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sap	3d_visual_enterprise_viewer	9	Yes

References

https://launchpad.support.sap.com/#/notes/3027758 Permissions Required, Vendor Advisory ([email protected])
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 Vendor Advisory ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-21-310/ Third Party Advisory, VDB Entry ([email protected])
https://www.zerodayinitiative.com/advisories/ZDI-21-312/ Third Party Advisory, VDB Entry ([email protected])
https://launchpad.support.sap.com/#/notes/3027758 Permissions Required, Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 Vendor Advisory (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-21-310/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)
https://www.zerodayinitiative.com/advisories/ZDI-21-312/ Third Party Advisory, VDB Entry (af854a3a-2127-422b-91ae-364da2661108)