Advisorycritical

CISA warns to address SAP ICMAD flaws immediately

Security Affairsby @securityaffairsFeb 9, 2022 · 22:23 UTC (Feb 9, 2022)2 min read2 · 1 read

Read at securityaffairs.com

Analyze CVE-2022-22536 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2022-22536 CVE-2022-22532 CVE-2022-22533

Tags: cve-2022-22536 cve-2022-22532 cve-2022-22533 advisory

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2022-22532 +1 related CVE CVE-2022-22533	In SAP NetWeaver Application Server Java - versions KRNL64NUC 7.22, 7.22EXT, 7.49, KRNL64UC, 7.22, 7.22EXT, 7.49, 7.53, KERNEL 7.22, 7.49, 7.53, an…	9.8 group max	2%		Feb 9, 2022
CVE-2022-22536	HTTP Request Smuggling in SAP NetWeaver, Web Dispatcher and Content Server	10.0	98%	KEV	Feb 9, 2022 KEV Aug 18, 2022

From the original article

2 min read at securityaffairs.com

The US CISA warns to address a severe security vulnerability dubbed ICMAD impacting SAP business apps using ICM.. Internet Communication Manager Advanced Desync (ICMAD) is a memory pipes (MPI) desynchronization vulnerability tracked as CVE-2022-22536 . An unauthenticated remote attacker could exploit this issue by sending a simple HTTP request to a vulnerable instance and take over it.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.