Denial of Service Vulnerability in SAP NetWeaver AS ABAP: SPI_WAIT_MILLIS Function Module

Denial of Service Vulnerability in SAP NetWeaver AS ABAP: SPI_WAIT_MILLIS Function Module

CVE-2021-27603 · MEDIUM Severity

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

An RFC enabled function module SPI_WAIT_MILLIS in SAP NetWeaver AS ABAP, versions - 731, 740, 750, allows to keep a work process busy for any length of time. An attacker could call this function module multiple times to block all work processes thereby causing Denial of Service and affecting the Availability of the SAP system.

Learn more about our Web Application Penetration Testing UK.