VULNERABILITY INTELLIGENCE

CVE-2021-27608

CVSS score7.5 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2021-04-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H

Description

An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process that is performed when an executable file is registered. This could further lead to complete compromise of confidentiality, Integrity and Availability.

Weakness classification

  • nvd@nist.gov: CWE-428

Primary references