Vulnerabilities > CVE-2023-29187 - Unspecified vulnerability in SAP Sapsetup 9.0

047910
CVSS 6.7 - MEDIUM
Attack vector
LOCAL
Attack complexity
HIGH
Privileges required
LOW
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
local
high complexity
sap

Summary

A Windows user with basic user authorization can exploit a DLL hijacking attack in SapSetup (Software Installation Program) - version 9.0, resulting in a privilege escalation running code as administrator of the very same Windows PC. A successful attack depends on various preconditions beyond the attackers control.

Vulnerable Configurations

Part Description Count
Application
Sap
1