SAP MDM Server Memory Access Violation Vulnerability in ReadString Function

A vulnerability in the SAP MDM Server's ReadString function allows attackers to send specially crafted packets that can cause a memory read access violation. This violation leads to the server process failing and exiting unexpectedly, which significantly impacts the application's availability. However, there is no effect on the confidentiality or integrity of the application.

Impact

Exploitation of this vulnerability causes a memory access violation, leading to a crash of the server process and an unexpected exit, causing a significant disruption in service availability.

Remediation

Users are advised to review and implement the SAP Security Note related to this vulnerability, available through the SAP for Me platform. This vulnerability will also be addressed in the upcoming SAP Security Patch Day.