VULNERABILITY INTELLIGENCE

CVE-2021-27592

CVSS score7.8 HIGH

EPSS probability1.43%

CISA KEVNot currently listed

Published2021-03-09

Last modified2026-06-17

CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Description

When a user opens manipulated Universal 3D (.U3D) files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application.

Weakness classification

nvd@nist.gov: NVD-CWE-noinfo

Primary references

cna@sap.com — Permissions Required, Vendor Advisory
cna@sap.com — Vendor Advisory
cna@sap.com — Third Party Advisory, VDB Entry
cna@sap.com — Third Party Advisory, VDB Entry
cna@sap.com — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry
af854a3a-2127-422b-91ae-364da2661108 — Third Party Advisory, VDB Entry